Trojaner-Board - beim Hochfahren von Vista kommt immer diese Fehlermeldung c:\program files(x86)\hometab\tbupdater.dll

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - beim Hochfahren von Vista kommt immer diese Fehlermeldung c:\program files(x86)\hometab\tbupdater.dll (https://www.trojaner-board.de/165539-beim-hochfahren-vista-kommt-immer-diese-fehlermeldung-c-program-files-x86-hometab-tbupdater-dll.html)

beim Hochfahren von Vista kommt immer diese Fehlermeldung c:\program files(x86)\hometab\tbupdater.dll

Ich bin absolut Leie. Kann mir hier jemand helfen? Ich weis nicht, an was diese Fehlermeldung liegen kann :(

Vielen Dank schonmal im Voraus.

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015

Ran by Ingrid Keim (administrator) on INGRIDKEIM-PC on 27-03-2015 09:00:18

Running from C:\Users\Ingrid Keim\Downloads

Loaded Profiles: Ingrid Keim (Available profiles: Ingrid Keim)

Platform: Windows Vista (TM) Home Premium Service Pack 2 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 9 (Default browser: FF)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forum
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\afwServ.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(TOSHIBA) C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCameraSrv.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe

(NETGEAR) C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenieDaemon64.exe

(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe

(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe

(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Microsoft Corporation) C:\Windows\System32\alg.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(Microsoft Corporation) C:\Windows\SysWOW64\conime.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

() C:\Program Files (x86)\Mozilla Firefox\updated\firefox.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7574048 2009-03-30] (Realtek Semiconductor)

HKLM\...\Run: [Skytel] => C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-03-30] (Realtek Semiconductor Corp.)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-06] (Apple Inc.)

HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [189480 2014-02-05] (Geek Software GmbH)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5512912 2015-03-24] (Avast Software s.r.o.)

HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)

HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-12-18] (Oracle Corporation)

HKU\S-1-5-21-833096433-3210486317-878258635-1000\...\MountPoints2: {47a4fac3-c049-11e2-a4c1-00235af71a47} - D:\Startme.exe

HKU\S-1-5-21-833096433-3210486317-878258635-1000\...\MountPoints2: {4a2480f7-c08d-11e2-ad63-00235af71a47} - D:\HTC_Sync_Manager_PC.exe

HKU\S-1-5-18\...\Run: [TOSHIBA Online Product Information] => C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe [6158240 2009-03-16] (TOSHIBA)

Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk

ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)

Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk

ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (Avast Software s.r.o.)

ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File

BootExecute: autocheck autochk * sdnclean64.exe
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

ProxyServer: [S-1-5-21-833096433-3210486317-878258635-1000] => :0

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Google

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKU\S-1-5-21-833096433-3210486317-878258635-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}

HKU\S-1-5-21-833096433-3210486317-878258635-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006

HKU\S-1-5-21-833096433-3210486317-878258635-1000\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd

HKU\S-1-5-21-833096433-3210486317-878258635-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006

URLSearchHook: HKU\S-1-5-21-833096433-3210486317-878258635-1000 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}

URLSearchHook: HKU\S-1-5-21-833096433-3210486317-878258635-1000 - (No Name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - No File

SearchScopes: HKLM -> DefaultScope {C62DE3D7-45C6-4083-B7BA-690A7731943D} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSEG;

SearchScopes: HKLM -> {C62DE3D7-45C6-4083-B7BA-690A7731943D} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSEG;

SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}

SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}

SearchScopes: HKU\S-1-5-21-833096433-3210486317-878258635-1000 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}

SearchScopes: HKU\S-1-5-21-833096433-3210486317-878258635-1000 -> {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd

SearchScopes: HKU\S-1-5-21-833096433-3210486317-878258635-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

SearchScopes: HKU\S-1-5-21-833096433-3210486317-878258635-1000 -> {C62DE3D7-45C6-4083-B7BA-690A7731943D} URL = 

SearchScopes: HKU\S-1-5-21-833096433-3210486317-878258635-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-03-24] (Avast Software s.r.o.)

BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27] (Adobe Systems Incorporated)

BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} ->  No File

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2015-03-27] (Oracle Corporation)

BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-24] (Avast Software s.r.o.)

BHO-x32: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation)

BHO-x32: No Name -> {ba696155-d96e-4281-b467-0367a0456474} ->  No File

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2015-03-27] (Oracle Corporation)

Toolbar: HKLM-x32 - No Name - {ba696155-d96e-4281-b467-0367a0456474} -  No File

Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)

Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Ingrid Keim\AppData\Roaming\Mozilla\Firefox\Profiles\dsglh94h.default

FF SelectedSearchEngine: Google

FF Homepage: hxxp://google.de/

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-03-27] ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-27] ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-20] ()

FF Plugin-x32: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Users\Ingrid Keim\Downloads\Player\DivX\DivX Player\npDivxPlayerPlugin.dll No File

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)

FF Plugin-x32: @google.com/npPicasa2,version=2.0.0 -> C:\Program Files (x86)\Picasa2\npPicasa2.dll [2008-08-21] (Google, Inc.)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Picasa2\npPicasa3.dll [2014-01-06] (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.76.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-03-27] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.76.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2015-03-27] (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)

FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 -> C:\Program Files (x86)\Sony\Media Go\npmediago.dll [2013-02-14] (Sony Network Entertainment International LLC)

FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2012-07-27] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFFICE.DLL [2007-03-22] (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2012-07-27] (Adobe Systems Inc.)

FF SearchPlugin: C:\Users\Ingrid Keim\AppData\Roaming\Mozilla\Firefox\Profiles\dsglh94h.default\searchplugins\icqplugin-1.xml [2013-04-05]

FF SearchPlugin: C:\Users\Ingrid Keim\AppData\Roaming\Mozilla\Firefox\Profiles\dsglh94h.default\searchplugins\icqplugin-2.xml [2013-03-24]

FF SearchPlugin: C:\Users\Ingrid Keim\AppData\Roaming\Mozilla\Firefox\Profiles\dsglh94h.default\searchplugins\icqplugin-3.xml [2013-03-27]

FF SearchPlugin: C:\Users\Ingrid Keim\AppData\Roaming\Mozilla\Firefox\Profiles\dsglh94h.default\searchplugins\icqplugin.xml [2010-07-04]

FF Extension: Microsoft .NET Framework Assistant - C:\Users\Ingrid Keim\AppData\Roaming\Mozilla\Firefox\Profiles\dsglh94h.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2012-04-18]

FF Extension: Adblock Plus - C:\Users\Ingrid Keim\AppData\Roaming\Mozilla\Firefox\Profiles\dsglh94h.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-11-16]

FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension

FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2010-05-15]

FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-03-24]
 

Chrome: 

=======

CHR HKLM-x32\...\Chrome\Extension: [fgibjgmnimooanbagcfpnkmngejcojaf] - C:\Program Files (x86)\HomeTab\chrome\HomeTab.crx [Not Found]

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-24]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-03-24] (Avast Software s.r.o.)

R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [107448 2015-03-24] (Avast Software s.r.o.)

R2 camsvc; C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCameraSrv.exe [20544 2009-04-16] (TOSHIBA)

R2 ConfigFree Gadget Service; C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe [36864 2009-03-06] (TOSHIBA CORPORATION) [File not signed]

R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [906752 2008-10-16] (Hewlett-Packard Co.) [File not signed]

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-07-18] (Hewlett-Packard) [File not signed]

R2 NETGEARGenieDaemon; C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenieDaemon64.exe [231752 2012-09-25] (NETGEAR)

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-07-18] (Hewlett-Packard) [File not signed]

R2 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [116104 2009-04-21] (Toshiba Europe GmbH)

R2 TNaviSrv; C:\Program Files (x86)\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe [83312 2009-03-30] (TOSHIBA Corporation)

R2 TODDSrv; C:\Windows\system32\TODDSrv.exe [135168 2007-11-21] (TOSHIBA Corporation) [File not signed]

R2 TOSHIBA Bluetooth Service; C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [153088 2007-02-02] (TOSHIBA CORPORATION) [File not signed]

R2 TOSHIBA eco Utility Service; C:\Program Files\TOSHIBA\TECO\TecoService.exe [242176 2009-04-24] (TOSHIBA Corporation) [File not signed]

R2 TOSHIBA HDD SSD Alert Service; C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [84480 2009-03-17] (TOSHIBA Corporation) [File not signed]

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [383544 2008-01-21] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-03-24] ()

R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-03-24] (Avast Software s.r.o.)

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [88408 2015-03-24] (Avast Software s.r.o.)

R0 aswNdis; C:\Windows\System32\DRIVERS\aswNdis.sys [12368 2015-03-24] (ALWIL Software)

R0 aswNdis2; C:\Windows\System32\Drivers\aswNdis2.sys [331464 2015-03-24] (Avast Software s.r.o.)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [64712 2015-03-24] (Avast Software s.r.o.)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-03-24] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-03-24] (Avast Software s.r.o.)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-03-24] (Avast Software s.r.o.)

R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65224 2015-03-24] (Avast Software s.r.o.)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [271200 2015-03-24] ()

R0 LPCFilter; C:\Windows\SysWOW64\DRIVERS\LPCFilter.sys [32040 2008-05-07] (COMPAL ELECTRONIC INC.)

R2 NPF; C:\Windows\system32\drivers\npf.sys [35344 2013-05-19] (CACE Technologies, Inc.)

S3 rtl819xpn64; C:\Windows\System32\DRIVERS\rtl819xp.sys [564224 2009-03-09] () [File not signed]

S3 cpuz132; \??\C:\Users\Stephie\AppData\Local\Temp\cpuz132\cpuz132_x64.sys [X]

S3 IpInIp; system32\DRIVERS\ipinip.sys [X]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-03-27 09:00 - 2015-03-27 09:00 - 00019530 _____ () C:\Users\Ingrid Keim\Downloads\FRST.txt

2015-03-27 09:00 - 2015-03-27 09:00 - 00000000 ____D () C:\FRST

2015-03-27 08:58 - 2015-03-27 08:58 - 02095616 _____ (Farbar) C:\Users\Ingrid Keim\Downloads\FRST64.exe

2015-03-27 08:41 - 2015-03-27 08:41 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2015-03-27 08:41 - 2015-03-27 08:41 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2015-03-27 08:41 - 2015-03-27 08:41 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2015-03-27 08:41 - 2015-03-27 08:41 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2015-03-27 08:41 - 2015-03-27 08:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2015-03-27 08:41 - 2015-03-27 08:41 - 00000000 ____D () C:\Program Files (x86)\Java

2015-03-26 19:31 - 2015-03-26 19:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2015-03-25 10:52 - 2015-03-25 10:52 - 00000296 _____ () C:\Windows\system32\spsys.log

2015-03-24 20:54 - 2015-02-20 03:03 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2015-03-24 20:54 - 2015-02-20 02:44 - 00048128 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-03-24 20:54 - 2015-02-20 01:39 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-03-24 20:54 - 2015-02-20 01:28 - 00296960 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2015-03-24 20:51 - 2014-10-13 02:12 - 02264064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2015-03-24 20:51 - 2014-10-13 01:56 - 03137536 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2015-03-24 20:49 - 2014-12-08 02:59 - 00306176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll

2015-03-24 20:49 - 2014-12-08 02:37 - 00399360 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll

2015-03-24 20:36 - 2014-11-26 03:05 - 00564224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2015-03-24 20:36 - 2014-11-26 02:42 - 00847360 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2015-03-24 20:35 - 2015-01-29 02:35 - 00975360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2015-03-24 20:35 - 2015-01-29 02:33 - 01209856 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2015-03-24 20:34 - 2014-12-19 01:26 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2015-03-24 20:33 - 2015-01-21 03:02 - 00807936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll

2015-03-24 20:33 - 2015-01-21 02:42 - 01040896 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2015-03-24 20:32 - 2014-08-23 02:05 - 00304128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2015-03-24 20:32 - 2014-08-23 01:42 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-03-24 20:29 - 2015-03-24 20:29 - 00342390 _____ () C:\Windows\dd_vstor40_lp_x64_deuUI67DE.txt

2015-03-24 20:29 - 2015-03-24 20:29 - 00046838 _____ () C:\Windows\dd_vstor40_lp_x64_deuMSI67DE.txt

2015-03-24 20:29 - 2014-11-04 01:35 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2015-03-24 20:29 - 2014-11-04 01:19 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2015-03-24 20:27 - 2014-08-12 03:25 - 00729600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL

2015-03-24 20:27 - 2014-08-12 03:11 - 00923136 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL

2015-03-24 20:26 - 2015-02-26 01:31 - 02792960 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-03-24 20:18 - 2014-06-15 23:18 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll

2015-03-24 20:18 - 2014-06-15 23:18 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll

2015-03-24 20:18 - 2014-06-13 19:22 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll

2015-03-24 20:18 - 2014-06-13 19:22 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll

2015-03-24 20:18 - 2014-06-13 18:36 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll

2015-03-24 20:18 - 2014-06-13 18:36 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll

2015-03-24 20:17 - 2015-02-18 03:02 - 11587584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2015-03-24 20:17 - 2015-02-18 02:42 - 12899840 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2015-03-24 20:17 - 2014-10-24 02:03 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-03-24 20:17 - 2014-10-24 01:39 - 00656384 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-03-24 20:08 - 2014-10-10 02:10 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2015-03-24 20:08 - 2014-10-10 02:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-03-24 20:08 - 2014-10-10 02:00 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-03-24 20:08 - 2014-10-10 00:53 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-03-24 20:08 - 2014-10-10 00:22 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-03-24 20:04 - 2014-06-26 23:17 - 01389200 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe

2015-03-24 20:04 - 2014-06-26 23:17 - 00619664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe

2015-03-24 20:04 - 2014-06-26 23:17 - 00171152 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll

2015-03-24 20:04 - 2014-06-26 23:17 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll

2015-03-24 20:04 - 2014-06-26 23:17 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll

2015-03-24 20:04 - 2014-06-26 23:17 - 00008848 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll

2015-03-24 20:04 - 2014-06-06 05:29 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2015-03-24 20:04 - 2014-06-06 05:28 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe

2015-03-24 20:02 - 2014-10-03 02:18 - 00274432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll

2015-03-24 20:02 - 2014-10-03 02:17 - 00396800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2015-03-24 20:02 - 2014-10-03 02:17 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2015-03-24 20:02 - 2014-10-03 02:03 - 00313344 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2015-03-24 20:02 - 2014-10-03 02:02 - 00201728 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2015-03-24 20:02 - 2014-10-03 02:01 - 00474624 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2015-03-24 20:02 - 2014-10-03 02:01 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2015-03-24 20:02 - 2014-10-03 00:49 - 00088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\audiodg.exe

2015-03-24 20:01 - 2015-03-24 20:02 - 00457682 _____ () C:\Windows\dd_vstor40_lp_x64_deuMSI52C5.txt

2015-03-24 20:01 - 2015-03-24 20:02 - 00339696 _____ () C:\Windows\dd_vstor40_lp_x64_deuUI52C5.txt

2015-03-24 19:58 - 2015-03-24 20:01 - 02071026 _____ () C:\Windows\dd_vstor40_x64MSI5011.txt

2015-03-24 19:58 - 2015-03-24 20:01 - 00339716 _____ () C:\Windows\dd_vstor40_x64UI5011.txt

2015-03-24 19:47 - 2015-01-29 02:35 - 00369664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2015-03-24 19:47 - 2015-01-29 02:33 - 00449024 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2015-03-24 19:45 - 2014-12-06 04:14 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll

2015-03-24 19:45 - 2014-12-06 04:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll

2015-03-24 19:45 - 2014-12-06 03:54 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll

2015-03-24 19:45 - 2014-12-06 03:54 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll

2015-03-24 19:44 - 2014-12-06 03:54 - 00178688 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2015-03-24 19:44 - 2014-10-24 02:04 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll

2015-03-24 19:44 - 2014-10-24 01:39 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2015-03-24 19:44 - 2014-09-05 00:38 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys

2015-03-24 19:44 - 2014-08-27 01:55 - 01249280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2015-03-24 19:44 - 2014-08-27 01:55 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2015-03-24 19:44 - 2014-08-27 01:41 - 01869824 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-03-24 19:44 - 2014-08-27 01:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-03-24 19:43 - 2015-02-26 02:40 - 04692408 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-03-24 19:43 - 2015-01-09 02:41 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-03-24 19:43 - 2015-01-09 01:29 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-03-24 19:40 - 2015-03-06 05:01 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-03-24 19:40 - 2015-03-06 04:35 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-03-24 19:40 - 2015-01-15 07:53 - 00077312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-03-24 19:40 - 2015-01-15 05:08 - 00516536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-03-24 19:40 - 2014-10-10 02:09 - 01689600 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-03-24 18:57 - 2015-02-21 20:17 - 17882624 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-03-24 18:57 - 2015-02-21 20:07 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-03-24 18:57 - 2015-02-21 20:02 - 10931200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-03-24 18:57 - 2015-02-21 20:00 - 02339840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-03-24 18:57 - 2015-02-21 19:54 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-03-24 18:57 - 2015-02-21 19:54 - 01388032 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-03-24 18:57 - 2015-02-21 19:53 - 01494016 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-03-24 18:57 - 2015-02-21 19:52 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2015-03-24 18:57 - 2015-02-21 19:52 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-03-24 18:57 - 2015-02-21 19:52 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-03-24 18:57 - 2015-02-21 19:51 - 02157568 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-03-24 18:57 - 2015-02-21 19:51 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-03-24 18:57 - 2015-02-21 19:51 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-03-24 18:57 - 2015-02-21 19:51 - 00598528 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-03-24 18:57 - 2015-02-21 19:51 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-03-24 18:57 - 2015-02-21 19:51 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-03-24 18:57 - 2015-02-21 19:51 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2015-03-24 18:57 - 2015-02-21 19:51 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2015-03-24 18:57 - 2015-02-21 19:50 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-03-24 18:57 - 2015-02-21 19:50 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-03-24 18:57 - 2015-02-21 19:50 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-03-24 18:57 - 2015-02-21 19:50 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2015-03-24 18:57 - 2015-02-21 18:37 - 12375040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-03-24 18:57 - 2015-02-21 18:34 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-03-24 18:57 - 2015-02-21 18:29 - 09747968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-03-24 18:57 - 2015-02-21 18:28 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-03-24 18:57 - 2015-02-21 18:22 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-03-24 18:57 - 2015-02-21 18:21 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-03-24 18:57 - 2015-02-21 18:21 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-03-24 18:57 - 2015-02-21 18:20 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2015-03-24 18:57 - 2015-02-21 18:20 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-03-24 18:57 - 2015-02-21 18:19 - 01803264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-03-24 18:57 - 2015-02-21 18:19 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-03-24 18:57 - 2015-02-21 18:19 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-03-24 18:57 - 2015-02-21 18:19 - 00421376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-03-24 18:57 - 2015-02-21 18:19 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-03-24 18:57 - 2015-02-21 18:18 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-03-24 18:57 - 2015-02-21 18:18 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-03-24 18:57 - 2015-02-21 18:18 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-03-24 18:57 - 2015-02-21 18:18 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-03-24 18:57 - 2015-02-21 18:18 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2015-03-24 18:57 - 2015-02-21 18:18 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2015-03-24 18:57 - 2015-02-21 18:18 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2015-03-24 18:57 - 2015-02-21 18:17 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-03-24 18:57 - 2014-06-14 01:56 - 00901568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2015-03-24 18:57 - 2014-06-14 01:51 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll

2015-03-24 18:56 - 2014-06-06 09:59 - 00506880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2015-03-24 18:56 - 2014-06-06 08:13 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2015-03-24 18:56 - 2014-06-02 22:30 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2015-03-24 18:56 - 2014-06-02 22:29 - 02280448 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2015-03-24 18:56 - 2014-06-02 22:29 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2015-03-24 18:56 - 2014-06-02 21:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2015-03-24 18:56 - 2014-06-02 11:31 - 00332800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll

2015-03-24 18:56 - 2014-06-02 11:30 - 01993728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2015-03-24 18:56 - 2014-05-30 08:10 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2015-03-24 18:33 - 2015-03-24 18:33 - 00000000 ____D () C:\Users\Ingrid Keim\AppData\Roaming\AVAST Software

2015-03-24 18:20 - 2015-03-24 18:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software

2015-03-24 18:19 - 2015-03-27 08:25 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update

2015-03-24 18:18 - 2015-03-24 18:18 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys

2015-03-24 18:18 - 2015-03-24 18:18 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys

2015-03-24 18:18 - 2015-03-24 18:18 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe

2015-03-24 18:18 - 2015-03-24 18:18 - 00331464 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswNdis2.sys

2015-03-24 18:18 - 2015-03-24 18:18 - 00271200 _____ () C:\Windows\system32\Drivers\aswVmm.sys

2015-03-24 18:18 - 2015-03-24 18:18 - 00088408 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys

2015-03-24 18:18 - 2015-03-24 18:18 - 00065736 _____ () C:\Windows\system32\Drivers\aswRvrt.sys

2015-03-24 18:18 - 2015-03-24 18:18 - 00065224 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswTdi.sys

2015-03-24 18:18 - 2015-03-24 18:18 - 00064712 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr.sys

2015-03-24 18:18 - 2015-03-24 18:18 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr

2015-03-24 18:18 - 2015-03-24 18:18 - 00029168 _____ () C:\Windows\system32\Drivers\aswHwid.sys

2015-03-24 18:18 - 2015-03-24 18:18 - 00028144 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswKbd.sys

2015-03-24 18:18 - 2015-03-24 18:18 - 00012368 _____ (ALWIL Software) C:\Windows\system32\Drivers\aswNdis.sys

2015-03-24 18:15 - 2015-03-24 18:15 - 00000000 ____D () C:\Program Files\AVAST Software

2015-03-24 18:14 - 2015-03-24 18:14 - 05453024 _____ (Avast Software s.r.o.) C:\Users\Ingrid Keim\Downloads\avast_premier_antivirus_setup_online.exe

2015-03-24 18:14 - 2015-03-24 18:14 - 00000000 ____D () C:\ProgramData\AVAST Software

2015-03-24 18:12 - 2015-03-24 18:12 - 07709864 _____ (McAfee, Inc.) C:\Users\Ingrid Keim\Downloads\Setup_serial_EuzO071l5E56nYjTuLzYOw2_key.exe

2015-03-24 18:08 - 2015-03-24 18:08 - 05315120 _____ (McAfee, Inc.) C:\Users\Ingrid Keim\Downloads\Setup_serial_sBpPxkZHpiFZsbQi36ZJeQ2_key.exe

2015-03-24 17:59 - 2015-03-24 18:05 - 00000000 ____D () C:\Program Files (x86)\SafeKey

2015-03-24 17:43 - 2015-03-25 10:46 - 00000000 ____D () C:\Program Files\Common Files\McAfee

2015-03-24 17:42 - 2015-03-24 17:59 - 26064960 _____ (McAfee, Inc.) C:\Users\Ingrid Keim\Downloads\Setup_serial_j9OgRELm4KqYxWZmBX5ckQ2_key.exe
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-03-27 08:58 - 2006-11-02 16:22 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2015-03-27 08:58 - 2006-11-02 16:22 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2015-03-27 08:50 - 2013-11-17 11:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2015-03-27 08:41 - 2013-04-23 19:09 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-03-27 08:40 - 2013-06-26 15:27 - 00000000 ____D () C:\Program Files (x86)\7-Zip

2015-03-27 08:40 - 2010-05-13 16:25 - 00000000 ____D () C:\Program Files (x86)\DivX

2015-03-27 08:40 - 2010-05-13 16:23 - 00000000 ____D () C:\ProgramData\DivX

2015-03-27 08:39 - 2010-05-13 16:27 - 00000000 ____D () C:\Users\Ingrid Keim\AppData\Roaming\DivX

2015-03-27 08:39 - 2010-05-13 16:27 - 00000000 ____D () C:\Program Files\DivX

2015-03-27 08:39 - 2009-08-02 15:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX

2015-03-27 08:38 - 2010-08-22 19:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

2015-03-27 08:37 - 2013-04-23 19:09 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-03-27 08:37 - 2013-04-23 19:09 - 00003736 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-03-27 08:37 - 2013-03-18 19:31 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-03-27 08:34 - 2008-01-21 12:10 - 01566772 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-03-27 08:34 - 2008-01-21 12:09 - 00674098 _____ () C:\Windows\system32\perfh007.dat

2015-03-27 08:34 - 2008-01-21 12:09 - 00146078 _____ () C:\Windows\system32\perfc007.dat

2015-03-27 08:29 - 2009-08-01 15:46 - 01838420 _____ () C:\Windows\WindowsUpdate.log

2015-03-27 08:26 - 2014-02-28 17:08 - 00003266 _____ () C:\Windows\setupact.log

2015-03-27 08:24 - 2014-06-20 10:33 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics

2015-03-27 08:23 - 2006-11-02 16:42 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-03-26 19:43 - 2009-08-16 17:34 - 00000012 _____ () C:\Windows\bthservsdp.dat

2015-03-26 19:43 - 2006-11-02 16:42 - 00032510 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2015-03-25 10:50 - 2006-11-02 16:21 - 00344648 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-03-25 10:47 - 2006-11-02 16:07 - 00000000 ____D () C:\Program Files\Windows Journal

2015-03-25 10:46 - 2013-11-17 11:00 - 00039746 _____ () C:\Windows\PFRO.log

2015-03-24 20:51 - 2009-06-05 16:32 - 00000000 ____D () C:\ProgramData\Microsoft Help

2015-03-24 20:16 - 2014-02-28 15:15 - 01543164 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2015-03-24 19:57 - 2013-08-14 19:05 - 00000000 ____D () C:\Windows\system32\MRT

2015-03-24 19:48 - 2010-08-20 16:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2015-03-24 19:48 - 2010-08-20 16:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

2015-03-24 18:19 - 2009-08-02 13:07 - 00000000 ____D () C:\Users\Ingrid Keim

2015-03-24 17:45 - 2013-08-28 18:53 - 00000000 ____D () C:\ProgramData\Avira

2015-03-24 17:43 - 2009-06-05 16:19 - 00000000 ____D () C:\ProgramData\McAfee

2015-02-26 21:14 - 2006-11-02 13:35 - 122905848 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
 

==================== Files in the root of some directories =======
 

2013-08-15 20:29 - 2013-08-15 20:29 - 0000732 _____ () C:\Users\Ingrid Keim\AppData\Local\d3d9caps64.dat

2013-10-22 14:47 - 2014-03-27 20:18 - 0008192 _____ () C:\Users\Ingrid Keim\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2010-05-13 16:26 - 2010-05-13 16:26 - 0424868 _____ () C:\Users\Ingrid Keim\AppData\Local\dd_vcredistMSI21C6.txt

2010-05-13 16:26 - 2010-05-13 16:26 - 0011722 _____ () C:\Users\Ingrid Keim\AppData\Local\dd_vcredistUI21C6.txt

2013-12-10 20:40 - 2013-12-10 20:40 - 0014702 _____ () C:\Users\Ingrid Keim\AppData\Local\dd_vcredistUI4BD4.txt

2013-06-26 15:25 - 2013-06-26 15:26 - 1077698 _____ () C:\Users\Ingrid Keim\AppData\Local\dd_vstor40_x64MSI627A.txt

2013-06-26 15:25 - 2013-06-26 15:26 - 0012510 _____ () C:\Users\Ingrid Keim\AppData\Local\dd_vstor40_x64UI627A.txt

2010-08-16 18:31 - 2010-08-20 16:42 - 0005409 _____ () C:\ProgramData\hpzinstall.log
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-03-27 08:30
 

==================== End Of Log ============================

--- --- ---

--- --- ---

FRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015

Ran by Ingrid Keim at 2015-03-27 09:01:22

Running from C:\Users\Ingrid Keim\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

(If an entry is included in the fixlist, it will be removed.)
 

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
 

==================== Installed Programs ======================
 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 

64 Bit HP CIO Components Installer (Version: 3.2.1 - Hewlett-Packard) Hidden

7-Zip 9.21 (HKLM-x32\...\{23170F69-40C1-2701-0921-000001000000}) (Version: 9.21.00.0 - Igor Pavlov)

7-Zip 9.22beta (HKLM-x32\...\7-Zip) (Version:  - )

Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.134 - Adobe Systems Incorporated)

Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.134 - Adobe Systems Incorporated)

Adobe Reader X (10.1.4) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.4 - Adobe Systems Incorporated)

Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

ATI Catalyst Install Manager (HKLM\...\{190A60F1-2FEE-0A11-7D37-D8607809CC39}) (Version: 3.0.723.0 - ATI Technologies, Inc.)

Avast Premier (HKLM-x32\...\Avast) (Version: 10.2.2215 - AVAST Software)

Bluetooth Stack for Windows by Toshiba (HKLM\...\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v5.10.04 - )

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

ccc-core-static (x32 Version: 2009.0421.2132.36832 - Ihr Firmenname) Hidden

Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

DivX Converter (HKLM-x32\...\{13F3917B56CD4C25848BDC69916971BB}) (Version: 7.1.0 - DivX, Inc.)

DivX Converter (HKLM-x32\...\{B13A7C41581B411290FBC0395694E2A9}) (Version: 7.1.0 - DivX, Inc.)

DivX Player (HKLM-x32\...\{8ADFC4160D694100B5B8A22DE9DCABD9}) (Version: 7.2.0 - DivX, Inc.)

DivX Plus DirectShow Filters (HKLM-x32\...\DivX Plus DirectShow Filters) (Version:  - DivX, Inc.)

DivX Version Checker (HKLM-x32\...\{3FC7CBBC4C1E11DCA1A752EA55D89593}) (Version: 7.1.0.2 - DivX, Inc.)

DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.64 - DivX, LLC)

HP Photosmart C4500 All-In-One Driver 12.0 Rel .4 (HKLM\...\{0BC1A5B2-79A1-4716-B3E5-4071E9AB6F43}) (Version: 12.0 - HP)

Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)

iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)

Java 7 Update 76 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217076FF}) (Version: 7.0.760 - Oracle)

Media Go (HKLM-x32\...\{362AB21A-E2C4-40CE-81C2-8C4D62B0635A}) (Version: 2.4.256 - Sony)

Media Go Video Playback Engine 1.116.103.02020 (HKLM-x32\...\{54215B8A-6212-8DB8-39B4-98EE2BB98BD1}) (Version: 1.116.103.02020 - Sony)

Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version:  - Microsoft Corporation)

Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office PowerPoint Viewer 2007 (German) (HKLM-x32\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)

Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft Works (HKLM-x32\...\{39D0E034-1042-4905-BECB-5502909FCB7C}) (Version: 9.7.0621 - Microsoft Corporation)

Mozilla Firefox 36.0.4 (x86 de) (HKLM-x32\...\Mozilla Firefox 36.0.4 (x86 de)) (Version: 36.0.4 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)

MSXML 4.0 SP2 (KB941833) (HKLM-x32\...\{C523D256-313D-4866-B36A-F3DE528246EF}) (Version: 4.20.9849.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

myphotobook 3.65 (HKLM-x32\...\myphotobook) (Version: 3.65 - myphotobook)

NETGEAR Genie (HKLM-x32\...\NETGEAR Genie) (Version: 2.2.27.1  - NETGEAR Inc.)

Network64 (Version: 120.0.194.000 - Hewlett-Packard) Hidden

PDF24 Creator 6.3.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)

Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)

PixiePack Codec Pack (HKLM-x32\...\{A8D647C8-65AC-409F-B7B2-3C0FEE1A32F2}) (Version: 1.1.1200.0 - None)

PlayReady PC runtime (HKLM\...\{704ABF63-B0B1-446B-9D92-C5D06AFCE7B6}) (Version: 1 - Microsoft Corporation)

PlayStation(R)Store (HKLM-x32\...\{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}) (Version: 4.14.6.15183 - Sony Computer Entertainment Inc.)

PS_AIO_04_C4580_Software_Min (x32 Version: 120.0.209.000 - Hewlett-Packard) Hidden

Radiotracker (HKLM-x32\...\{2D914DDD-0410-4501-9B95-C31837EF313B}) (Version: 6.2.11700.0 - RapidSolution Software AG)

Realtek 8136 8168 8169 Ethernet Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0004 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5821 - Realtek Semiconductor Corp.)

Realtek USB 2.0 Card Reader (HKLM-x32\...\{DC24971E-1946-445D-8A82-CE685433FA7D}) (Version: 6.0.6000.20132 - Realtek Semiconductor Corp.)

Realtek WiFi Protected Setup Library (HKLM-x32\...\{02CA24DD-C8B0-4280-BE53-7862869C2EB1}) (Version: Package:1.00.0026 - REALTEK Semiconductor Corp.)

Realtek WLAN Driver (HKLM-x32\...\{0FB630AB-7BD8-40AE-B223-60397D57C3C9}) (Version: 2.00.0003 - Realtek)

Scan (x32 Version: 12.0.0.0 - Hewlett-Packard) Hidden

Skins (x32 Version: 2009.0421.2132.36832 - ATI) Hidden

Sony PC Companion 2.10.179 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.179 - Sony)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 12.2.11.0 - Synaptics Incorporated)

Toolbox (x32 Version: 120.0.194.000 - Hewlett-Packard) Hidden

Toshiba Assist (HKLM-x32\...\{1B87C40B-A60B-4EF3-9A68-706CF4B69978}) (Version: 3.00.08 - TOSHIBA)

TOSHIBA Benutzerhandbücher (HKLM-x32\...\{1C971EE3-B4C4-4367-9676-57549919C6CE}) (Version: 7.40 - TOSHIBA)

TOSHIBA ConfigFree (HKLM-x32\...\{F0A386D2-6E15-4A8F-A04E-87CE9BED0D48}) (Version: 7.4.9 - TOSHIBA Corporation)

TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.0.1.3 for x64 - TOSHIBA Corporation)

TOSHIBA DVD PLAYER (HKLM-x32\...\{6C5F3BDC-0A1B-4436-A696-5939629D5C31}) (Version: 3.00.1.04-A - TOSHIBA Corporation)

TOSHIBA eco Utility (HKLM-x32\...\InstallShield_{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}) (Version: 1.0.3.64 - TOSHIBA Corporation)

TOSHIBA Extended Tiles for Windows Mobility Center (HKLM-x32\...\InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}) (Version:  - )

TOSHIBA Face Recognition (HKLM-x32\...\InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}) (Version: 3.0.5.64 - TOSHIBA Corporation)

TOSHIBA Flash Cards Support Utility (HKLM-x32\...\InstallShield_{620BBA5E-F848-4D56-8BDA-584E44584C5E}) (Version: 1.63.0.3C - TOSHIBA CORPORATION)

TOSHIBA Hardware Setup (HKLM-x32\...\InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}) (Version: 1.63.0.6C - TOSHIBA CORPORATION)

TOSHIBA HDD/SSD Alert (HKLM-x32\...\InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.0.64.1 - TOSHIBA Corporation)

Toshiba Online Product Information (HKLM-x32\...\{2290A680-4083-410A-ADCC-7092C67FC052}) (Version: 2.06.0000 - TOSHIBA)

TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.3.2.64 - TOSHIBA Corporation)

TOSHIBA Recovery Disc Creator (HKLM\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.0.0.2 for x64 - TOSHIBA)

TOSHIBA Recovery Disk Creator Reminder (HKLM-x32\...\InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}) (Version: 1.00.0017 - TOSHIBA)

TOSHIBA SD Memory Utilities (HKLM\...\{EBFF48F5-3CFA-436F-8FD5-94FB01D3A0A7}) (Version: 1.9.1.12 - TOSHIBA)

TOSHIBA Service Station (HKLM-x32\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.2.9 - TOSHIBA)

TOSHIBA Supervisorkennwort (HKLM-x32\...\InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}) (Version: 1.63.0.3C - TOSHIBA CORPORATION)

Toshiba TEMPRO (HKLM-x32\...\{7C30283C-8DC7-4FBB-805E-52BEA5F580E8}) (Version: 2.0 - Toshiba Europe GmbH)

TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.2.8.64 - TOSHIBA Corporation)

TOSHIBA Web Camera Application (HKLM-x32\...\{5E6F6CF3-BACC-4144-868C-E14622C658F3}) (Version: 1.0.1.8 - TOSHIBA Corporation)

TRORDCLauncher (HKLM-x32\...\InstallShield_{E65C7D8E-186D-484B-BEA8-DEF0331CE600}) (Version: 1.0.0.6 - TOSHIBA)

TRORDCLauncher (x32 Version: 1.0.0.6 - TOSHIBA) Hidden

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)

Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)

Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)

Utility Common Driver (x32 Version: 1.0.50.22C - TOSHIBA) Hidden

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden

VisualBee for Microsoft PowerPoint (HKU\S-1-5-21-833096433-3210486317-878258635-1000\...\VisualBee for Microsoft PowerPoint) (Version: V3.9 - VisualBee.com)

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.0 - VideoLAN)

WildTangent-Spiele (HKLM-x32\...\WildTangent toshiba Master Uninstall) (Version: 1.0.0.71 - WildTangent)

Windows Live Anmelde-Assistent (HKLM-x32\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)

Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
 

==================== Custom CLSID (selected items): ==========================
 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 

CustomCLSID: HKU\S-1-5-21-833096433-3210486317-878258635-1000_Classes\CLSID\{6BEF3D0B-53F0-4b0d-B91C-C19ED3D4C9D1}\InprocServer32 -> C:\Windows\system32\TosBtShell.dll (TOSHIBA)
 

==================== Restore Points  =========================
 

13-04-2014 18:53:36 Windows Update

18-04-2014 13:03:41 Windows Update

24-04-2014 09:01:44 Windows Update

29-04-2014 09:08:20 Windows Update

03-05-2014 10:54:18 Windows Update

03-05-2014 19:08:11 Windows Update

07-05-2014 14:34:41 Windows Update

11-05-2014 06:59:24 Windows Update

14-05-2014 08:09:27 Windows Update

14-05-2014 08:18:48 Windows Update

18-05-2014 16:07:21 Windows Update

22-05-2014 17:29:29 Windows Update

27-05-2014 16:46:39 Installed calibre

30-05-2014 18:01:26 Windows Update

07-06-2014 18:00:44 Windows Update

18-06-2014 09:16:20 Windows Update

18-06-2014 14:05:38 Windows Update

24-03-2015 17:54:03 Removed calibre

24-03-2015 18:14:48 avast! antivirus system restore point

24-03-2015 18:16:42 Windows Update

24-03-2015 18:19:20 Gerätetreiber-Paketinstallation: ALWIL Software Netzwerkdienst

24-03-2015 19:40:15 Windows Update
 

==================== Hosts content: ==========================
 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 

2006-11-02 13:34 - 2006-09-18 22:37 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost

::1             localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 

Task: {0F7C8E90-49DC-4277-B8F4-6E214ED8883E} - System32\Tasks\Browser Updater\Browser Updater => Rundll32.exe "C:\Program Files (x86)\HomeTab\TBUpdater.dll",TBCheckForUpdate

Task: {1005D5C4-1473-4E7B-A2A8-1691E1EBA48C} - System32\Tasks\SuperEasyDriverUpdater_UPDATES => C:\Program Files (x86)\SuperEasy Software\Driver Updater\supereasydu.exe

Task: {3226A65F-38BD-475A-9D0E-C004EBFC975C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {6A960A88-5813-445D-AD89-10126633A472} - System32\Tasks\SuperEasyDriverUpdaterRunAtStartup => C:\Program Files (x86)\SuperEasy Software\Driver Updater\supereasydu.exe

Task: {8717ED33-643E-4F58-8C81-71C2D929B010} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-03-27] (Adobe Systems Incorporated)

Task: {A3A6F2E3-4DB6-4C6C-B910-61E7B052DEB8} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-03-24] (Avast Software s.r.o.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\SuperEasyDriverUpdater_UPDATES.job => C:\Program Files (x86)\SuperEasy Software\Driver Updater\supereasydu.exe
 

==================== Loaded Modules (whitelisted) ==============
 

2009-08-01 15:50 - 2009-04-21 21:06 - 00120320 _____ () C:\Windows\system32\atitmm64.dll

2009-04-24 10:39 - 2009-04-24 10:39 - 00549376 _____ () C:\Program Files\TOSHIBA\TECO\TecoPower.dll

2014-01-10 06:26 - 2014-01-10 06:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

2015-03-24 18:18 - 2015-03-24 18:18 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll

2015-03-24 18:18 - 2015-03-24 18:18 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll

2015-03-26 12:25 - 2015-03-26 12:25 - 02923008 _____ () C:\Program Files\AVAST Software\Avast\defs\15032600\algo.dll

2015-03-27 08:26 - 2015-03-27 08:26 - 02923008 _____ () C:\Program Files\AVAST Software\Avast\defs\15032601\algo.dll

2015-03-27 09:02 - 2015-03-27 09:02 - 02923008 _____ () C:\Program Files\AVAST Software\Avast\defs\15032700\algo.dll

2014-02-06 00:52 - 2014-02-06 00:52 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2014-02-06 00:52 - 2014-02-06 00:52 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2015-03-24 18:18 - 2015-03-24 18:18 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

2014-01-10 06:28 - 2014-01-10 06:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 

AlternateDataStreams: C:\ProgramData\TEMP:CB0AACC9
 

==================== Safe Mode (whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
 

==================== EXE Association (whitelisted) ===============
 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 

==================== Other Areas ============================
 

(Currently there is no automatic fix for this section.)
 

HKU\S-1-5-21-833096433-3210486317-878258635-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Ingrid Keim\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg

DNS Servers: 192.168.1.1
 

==================== MSCONFIG/TASK MANAGER disabled items ==
 

(Currently there is no automatic fix for this section.)
 

MSCONFIG\Services: Bonjour Service => 2

MSCONFIG\Services: iPod Service => 3

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth Manager.lnk => C:\Windows\pss\Bluetooth Manager.lnk.CommonStartup

MSCONFIG\startupreg: 00TCrdMain => %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: ApnTBMon => "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"

MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

MSCONFIG\startupreg: avgnt => "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min

MSCONFIG\startupreg: cfFncEnabler.exe => "C:\Program Files (x86)\TOSHIBA\ConfigFree\cfFncEnabler.exe"

MSCONFIG\startupreg: DivXMediaServer => "C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe"

MSCONFIG\startupreg: DivXUpdate => "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

MSCONFIG\startupreg: HSON => %ProgramFiles%\TOSHIBA\TBS\HSON.exe

MSCONFIG\startupreg: HWSetup => "C:\Program Files\TOSHIBA\Utilities\HWSetup.exe" hwSetUP

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: KeNotify => "C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe"

MSCONFIG\startupreg: NDSTray.exe => "C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe"

MSCONFIG\startupreg: NETGEARGenie => "C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenie.exe" -mini -redirect

MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

MSCONFIG\startupreg: Skytel => C:\Program Files\Realtek\Audio\HDA\Skytel.exe

MSCONFIG\startupreg: SmartFaceVWatcher => %ProgramFiles%\Toshiba\SmartFaceV\SmartFaceVWatcher.exe

MSCONFIG\startupreg: SmoothView => %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe

MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

MSCONFIG\startupreg: SVPWUTIL => "C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe" SVPwUTIL

MSCONFIG\startupreg: SynTPEnh => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

MSCONFIG\startupreg: Teco => "%ProgramFiles%\TOSHIBA\TECO\Teco.exe" /r

MSCONFIG\startupreg: TOSHIBA Online Product Information => C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe

MSCONFIG\startupreg: Toshiba Registration => C:\Program Files\Toshiba\Registration\ToshibaReminder.exe

MSCONFIG\startupreg: Toshiba TEMPRO => C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe

MSCONFIG\startupreg: ToshibaServiceStation => "C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60

MSCONFIG\startupreg: TosSENotify => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe

MSCONFIG\startupreg: TPCHWMsg => C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe

MSCONFIG\startupreg: TPwrMain => %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE

MSCONFIG\startupreg: TWebCamera => "%ProgramFiles(x86)%\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun

MSCONFIG\startupreg: Windows Defender => %ProgramFiles%\Windows Defender\MSASCui.exe -hide
 

==================== Accounts: =============================
 

Administrator (S-1-5-21-833096433-3210486317-878258635-500 - Administrator - Disabled)

Gast (S-1-5-21-833096433-3210486317-878258635-501 - Limited - Disabled)

Ingrid Keim (S-1-5-21-833096433-3210486317-878258635-1000 - Administrator - Enabled) => C:\Users\Ingrid Keim
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (03/27/2015 08:24:49 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (03/26/2015 00:28:16 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledSPRetry 15835
 

Error: (03/26/2015 00:28:16 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: m->NextScheduledEvent 15835
 

Error: (03/26/2015 00:28:16 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Task Scheduling Error: Continuously busy for more than a second
 

Error: (03/26/2015 00:23:37 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (03/25/2015 10:52:34 AM) (Source: .NET Runtime Optimization Service) (EventID: 1107) (User: )

Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Failed to execute command from the offline queue: uninstall "System.Messaging, Version=2.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil".  The error returned was Error: The specified assembly is not installed.

.
 

Error: (03/25/2015 10:52:34 AM) (Source: .NET Runtime Optimization Service) (EventID: 1107) (User: )

Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Failed to execute command from the offline queue: uninstall "Microsoft.VisualBasic, Version=8.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil" /NoDependencies .  The error returned was Error: The specified assembly is not installed.

.
 

Error: (03/25/2015 10:52:34 AM) (Source: .NET Runtime Optimization Service) (EventID: 1107) (User: )

Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_32) - Failed to execute command from the offline queue: uninstall "Microsoft.Build.Tasks, Version=2.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil" /NoDependencies .  The error returned was Error: The specified assembly is not installed.

.
 

Error: (03/25/2015 10:51:41 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (03/24/2015 08:29:43 PM) (Source: MsiInstaller) (EventID: 1013) (User: NT-AUTORITÄT)

Description: Produkt: Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU -- A later version of Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU is already installed.
 
 

System errors:

=============

Error: (03/27/2015 08:26:37 AM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: 30000avast! Antivirus
 

Error: (03/26/2015 06:53:31 PM) (Source: ipnathlp) (EventID: 31004) (User: )

Description: 0 Bytes Speicher konnten durch den DNS-Proxy-Agenten nicht zugeordnet werden. Möglicherweise ist nicht genügend Speicher vorhanden oder ein interner Fehler ist im Speicher-Manager aufgetreten.
 

Error: (03/24/2015 08:51:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Windows Search%%1053
 

Error: (03/24/2015 08:51:28 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: 30000Windows Search
 

Error: (03/24/2015 08:46:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Windows Search%%1053
 

Error: (03/24/2015 08:46:00 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: 30000Windows Search
 

Error: (03/24/2015 08:45:29 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Windows Search%%1053
 

Error: (03/24/2015 08:45:29 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: 30000Windows Search
 

Error: (03/24/2015 08:33:19 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Windows Search%%1053
 

Error: (03/24/2015 08:33:19 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: 30000Windows Search
 
 

Microsoft Office Sessions:

=========================
 

==================== Memory info =========================== 
 

Processor: Pentium(R) Dual-Core CPU T4300 @ 2.10GHz

Percentage of memory in use: 44%

Total physical RAM: 4059.93 MB

Available physical RAM: 2242.3 MB

Total Pagefile: 8323.14 MB

Available Pagefile: 6366.52 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB
 

==================== Drives ================================
 

Drive c: (Vista) (Fixed) (Total:186.31 GB) (Free:100.97 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive e: (Data) (Fixed) (Total:184.84 GB) (Free:170.82 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 372.6 GB) (Disk ID: 7878FC96)

Partition 1: (Not Active) - (Size=1.5 GB) - (Type=27)

Partition 2: (Active) - (Size=186.3 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=184.8 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

--- --- ---

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Hi,

als die Datei einen Neustart machen wollte, kam diese.Meldung:

Warning!
Unable to create a backup of the current registry file
C:\Windows\System32\config\security !

Continue restoration of this file?

Combofix Logfile:

Code:

ComboFix 15-03-25.01 - Ingrid Keim 28.03.2015   8:14.1.2 - x64

Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.49.1031.18.4060.2329 [GMT 1:00]

ausgeführt von:: c:\users\Ingrid Keim\Desktop\ComboFix.exe

AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}

FW: avast! Antivirus *Enabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\windows\SysWow64\Packet.dll

c:\windows\SysWow64\wpcap.dll

c:\windows\wininit.ini

.

.

(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

-------\Legacy_NPF

-------\Service_NPF

.

.

(((((((((((((((((((((((   Dateien erstellt von 2015-02-28 bis 2015-03-28  ))))))))))))))))))))))))))))))

.

.

2015-03-28 07:28 . 2015-03-28 07:45        --------        d-----w-        c:\users\Ingrid Keim\AppData\Local\temp

2015-03-28 07:28 . 2015-03-28 07:28        --------        d-----w-        c:\users\Default\AppData\Local\temp

2015-03-27 13:06 . 2015-03-23 01:32        12002392        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{E6D7E1F2-AADE-4131-9424-FF8B1B453350}\mpengine.dll

2015-03-27 08:00 . 2015-03-27 08:03        --------        d-----w-        C:\FRST

2015-03-27 07:41 . 2015-03-27 07:41        --------        d-----w-        c:\program files (x86)\Common Files\Java

2015-03-27 07:41 . 2015-03-27 07:41        98216        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll

2015-03-27 07:41 . 2015-03-27 07:41        --------        d-----w-        c:\program files (x86)\Java

2015-03-24 19:54 . 2015-02-20 02:03        34304        ----a-w-        c:\windows\SysWow64\atmlib.dll

2015-03-24 19:54 . 2015-02-20 01:44        48128        ----a-w-        c:\windows\system32\atmlib.dll

2015-03-24 19:54 . 2015-02-20 00:39        372224        ----a-w-        c:\windows\system32\atmfd.dll

2015-03-24 19:54 . 2015-02-20 00:28        296960        ----a-w-        c:\windows\SysWow64\atmfd.dll

2015-03-24 19:51 . 2014-10-13 01:12        2264064        ----a-w-        c:\windows\SysWow64\msi.dll

2015-03-24 19:51 . 2014-10-13 00:56        3137536        ----a-w-        c:\windows\system32\msi.dll

2015-03-24 19:49 . 2014-12-08 01:59        306176        ----a-w-        c:\windows\SysWow64\scesrv.dll

2015-03-24 19:49 . 2014-12-08 01:37        399360        ----a-w-        c:\windows\system32\scesrv.dll

2015-03-24 19:36 . 2014-11-26 02:05        564224        ----a-w-        c:\windows\SysWow64\oleaut32.dll

2015-03-24 19:36 . 2014-11-26 01:42        847360        ----a-w-        c:\windows\system32\oleaut32.dll

2015-03-24 19:35 . 2015-01-29 01:35        975360        ----a-w-        c:\windows\SysWow64\WindowsCodecs.dll

2015-03-24 19:35 . 2015-01-29 01:33        1209856        ----a-w-        c:\windows\system32\WindowsCodecs.dll

2015-03-24 19:34 . 2014-12-19 00:26        139776        ----a-w-        c:\windows\system32\drivers\mrxdav.sys

2015-03-24 19:33 . 2015-01-21 02:02        807936        ----a-w-        c:\windows\SysWow64\msctf.dll

2015-03-24 19:33 . 2015-01-21 01:42        1040896        ----a-w-        c:\windows\system32\msctf.dll

2015-03-24 19:32 . 2014-08-23 01:05        304128        ----a-w-        c:\windows\SysWow64\gdi32.dll

2015-03-24 19:32 . 2014-08-23 00:42        390144        ----a-w-        c:\windows\system32\gdi32.dll

2015-03-24 19:29 . 2014-11-04 00:35        2048        ----a-w-        c:\windows\system32\tzres.dll

2015-03-24 19:29 . 2014-11-04 00:19        2048        ----a-w-        c:\windows\SysWow64\tzres.dll

2015-03-24 19:27 . 2014-08-12 02:25        729600        ----a-w-        c:\windows\SysWow64\IMJP10K.DLL

2015-03-24 19:27 . 2014-08-12 02:11        923136        ----a-w-        c:\windows\system32\IMJP10K.DLL

2015-03-24 19:26 . 2015-02-26 00:31        2792960        ----a-w-        c:\windows\system32\win32k.sys

2015-03-24 19:18 . 2014-06-15 22:18        1131664        ----a-w-        c:\windows\SysWow64\dfshim.dll

2015-03-24 19:18 . 2014-06-15 22:18        1943696        ----a-w-        c:\windows\system32\dfshim.dll

2015-03-24 19:18 . 2014-06-13 18:22        81560        ----a-w-        c:\windows\SysWow64\mscories.dll

2015-03-24 19:18 . 2014-06-13 18:22        156824        ----a-w-        c:\windows\SysWow64\mscorier.dll

2015-03-24 19:18 . 2014-06-13 17:36        73880        ----a-w-        c:\windows\system32\mscories.dll

2015-03-24 19:18 . 2014-06-13 17:36        156312        ----a-w-        c:\windows\system32\mscorier.dll

2015-03-24 19:17 . 2014-10-24 01:03        499200        ----a-w-        c:\windows\SysWow64\kerberos.dll

2015-03-24 19:17 . 2014-10-24 00:39        656384        ----a-w-        c:\windows\system32\kerberos.dll

2015-03-24 19:17 . 2015-02-18 01:42        12899840        ----a-w-        c:\windows\system32\shell32.dll

2015-03-24 19:08 . 2014-10-10 01:09        146432        ----a-w-        c:\windows\system32\msaudite.dll

2015-03-24 19:08 . 2014-10-10 01:00        146432        ----a-w-        c:\windows\SysWow64\msaudite.dll

2015-03-24 19:08 . 2014-10-09 23:53        619520        ----a-w-        c:\windows\system32\adtschema.dll

2015-03-24 19:08 . 2014-10-09 23:22        619520        ----a-w-        c:\windows\SysWow64\adtschema.dll

2015-03-24 19:08 . 2014-10-10 01:10        548352        ----a-w-        c:\windows\system32\termsrv.dll

2015-03-24 19:04 . 2014-06-26 22:17        99480        ----a-w-        c:\windows\SysWow64\infocardapi.dll

2015-03-24 19:04 . 2014-06-26 22:17        8856        ----a-w-        c:\windows\SysWow64\icardres.dll

2015-03-24 19:04 . 2014-06-26 22:17        8848        ----a-w-        c:\windows\system32\icardres.dll

2015-03-24 19:04 . 2014-06-26 22:17        171152        ----a-w-        c:\windows\system32\infocardapi.dll

2015-03-24 19:04 . 2014-06-26 22:17        1389200        ----a-w-        c:\windows\system32\icardagt.exe

2015-03-24 19:04 . 2014-06-26 22:17        619664        ----a-w-        c:\windows\SysWow64\icardagt.exe

2015-03-24 19:04 . 2014-06-06 04:28        35480        ----a-w-        c:\windows\SysWow64\TsWpfWrp.exe

2015-03-24 19:04 . 2014-06-06 04:29        35480        ----a-w-        c:\windows\system32\TsWpfWrp.exe

2015-03-24 19:02 . 2014-10-03 01:18        274432        ----a-w-        c:\windows\SysWow64\AUDIOKSE.dll

2015-03-24 19:02 . 2014-10-03 01:17        396800        ----a-w-        c:\windows\SysWow64\AudioEng.dll

2015-03-24 19:02 . 2014-10-03 01:17        115712        ----a-w-        c:\windows\SysWow64\AudioSes.dll

2015-03-24 19:02 . 2014-10-03 01:03        313344        ----a-w-        c:\windows\system32\AUDIOKSE.dll

2015-03-24 19:02 . 2014-10-03 01:02        201728        ----a-w-        c:\windows\system32\EncDump.dll

2015-03-24 19:02 . 2014-10-03 01:01        474624        ----a-w-        c:\windows\system32\AudioEng.dll

2015-03-24 19:02 . 2014-10-03 01:01        446976        ----a-w-        c:\windows\system32\audiosrv.dll

2015-03-24 19:02 . 2014-10-02 23:49        88576        ----a-w-        c:\windows\SysWow64\audiodg.exe

2015-03-24 18:47 . 2015-01-29 01:35        369664        ----a-w-        c:\windows\SysWow64\WMPhoto.dll

2015-03-24 18:47 . 2015-01-29 01:33        449024        ----a-w-        c:\windows\system32\WMPhoto.dll

2015-03-24 18:45 . 2014-12-06 03:14        48640        ----a-w-        c:\windows\SysWow64\nlaapi.dll

2015-03-24 18:45 . 2014-12-06 03:14        93184        ----a-w-        c:\windows\SysWow64\ncsi.dll

2015-03-24 18:45 . 2014-12-06 02:54        61440        ----a-w-        c:\windows\system32\nlaapi.dll

2015-03-24 18:45 . 2014-12-06 02:54        205824        ----a-w-        c:\windows\system32\nlasvc.dll

2015-03-24 18:44 . 2014-12-06 02:54        178688        ----a-w-        c:\windows\system32\profsvc.dll

2015-03-24 18:44 . 2014-10-24 01:04        67072        ----a-w-        c:\windows\SysWow64\packager.dll

2015-03-24 18:44 . 2014-10-24 00:39        77312        ----a-w-        c:\windows\system32\packager.dll

2015-03-24 18:44 . 2014-09-04 23:38        198656        ----a-w-        c:\windows\system32\drivers\fastfat.sys

2015-03-24 18:44 . 2014-08-27 00:55        2048        ----a-w-        c:\windows\SysWow64\msxml3r.dll

2015-03-24 18:44 . 2014-08-27 00:55        1249280        ----a-w-        c:\windows\SysWow64\msxml3.dll

2015-03-24 18:44 . 2014-08-27 00:41        2048        ----a-w-        c:\windows\system32\msxml3r.dll

2015-03-24 18:44 . 2014-08-27 00:41        1869824        ----a-w-        c:\windows\system32\msxml3.dll

2015-03-24 18:43 . 2015-02-26 01:40        4692408        ----a-w-        c:\windows\system32\ntoskrnl.exe

2015-03-24 18:43 . 2015-01-09 01:41        85504        ----a-w-        c:\windows\system32\csrsrv.dll

2015-03-24 18:43 . 2015-01-09 00:29        75264        ----a-w-        c:\windows\system32\smss.exe

2015-03-24 18:40 . 2015-01-15 06:53        77312        ----a-w-        c:\windows\SysWow64\secur32.dll

2015-03-24 18:40 . 2015-03-06 04:01        279040        ----a-w-        c:\windows\SysWow64\schannel.dll

2015-03-24 18:40 . 2015-03-06 03:35        347136        ----a-w-        c:\windows\system32\schannel.dll

2015-03-24 18:40 . 2015-01-15 04:08        516536        ----a-w-        c:\windows\system32\drivers\ksecdd.sys

2015-03-24 18:40 . 2014-10-10 01:09        1689600        ----a-w-        c:\windows\system32\lsasrv.dll

2015-03-24 17:56 . 2014-06-07 01:41        1871872        ----a-w-        c:\program files\Common Files\Microsoft Shared\ink\tipskins.dll

2015-03-24 17:56 . 2014-06-07 01:41        120832        ----a-w-        c:\program files\Common Files\Microsoft Shared\ink\TipBand.dll

2015-03-24 17:56 . 2014-06-07 01:41        206336        ----a-w-        c:\program files\Common Files\Microsoft Shared\ink\tabskb.dll

2015-03-24 17:56 . 2014-06-07 00:22        10240        ----a-w-        c:\program files (x86)\Common Files\Microsoft Shared\ink\TabTip32.exe

2015-03-24 17:56 . 2014-06-06 08:59        506880        ----a-w-        c:\windows\SysWow64\qedit.dll

2015-03-24 17:56 . 2014-06-06 07:13        620032        ----a-w-        c:\windows\system32\qedit.dll

2015-03-24 17:56 . 2014-06-02 21:29        2280448        ----a-w-        c:\windows\system32\authui.dll

2015-03-24 17:56 . 2014-06-02 21:30        503296        ----a-w-        c:\windows\system32\msihnd.dll

2015-03-24 17:56 . 2014-06-02 21:29        45056        ----a-w-        c:\windows\system32\appinfo.dll

2015-03-24 17:56 . 2014-06-02 20:29        87552        ----a-w-        c:\windows\system32\consent.exe

2015-03-24 17:56 . 2014-06-02 10:31        332800        ----a-w-        c:\windows\SysWow64\msihnd.dll

2015-03-24 17:56 . 2014-06-02 10:30        1993728        ----a-w-        c:\windows\SysWow64\authui.dll

2015-03-24 17:56 . 2014-05-30 07:10        404992        ----a-w-        c:\windows\system32\drivers\afd.sys

2015-03-24 17:33 . 2015-03-24 17:33        --------        d-----w-        c:\users\Ingrid Keim\AppData\Roaming\AVAST Software

2015-03-24 17:15 . 2015-03-24 17:15        --------        d-----w-        c:\program files\AVAST Software

2015-03-24 17:14 . 2015-03-24 17:14        --------        d-----w-        c:\programdata\AVAST Software

2015-03-24 17:12 . 2015-03-25 09:46        --------        d-----w-        c:\program files (x86)\Common Files\McAfee

2015-03-24 16:59 . 2015-03-24 17:05        --------        d-----w-        c:\program files (x86)\SafeKey

2015-03-24 16:43 . 2015-03-25 09:46        --------        d-----w-        c:\program files\Common Files\McAfee

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2015-03-27 07:37 . 2013-04-23 18:09        778928        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2015-03-27 07:37 . 2013-03-18 18:31        142512        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2015-02-26 20:14 . 2006-11-02 12:35        122905848        ----a-w-        c:\windows\system32\mrt.exe

2015-02-24 03:17 . 2013-08-28 17:47        295552        ------w-        c:\windows\system32\MpSigStub.exe

2015-02-17 15:04 . 2015-02-17 15:04        1202848        ----a-w-        c:\windows\SysWow64\FM20.DLL

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-02-05 43848]

"PDFPrint"="c:\program files (x86)\PDF24\pdf24.exe" [2014-02-05 189480]

"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-02-21 152392]

"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2015-03-24 5512912]

"DivXMediaServer"="c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe" [2014-11-17 448856]

"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2014-01-10 1861968]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2014-12-18 271744]

.

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"TOSHIBA Online Product Information"="c:\program files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe" [2009-03-16 6158240]

.

c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

TRDCReminder.lnk - c:\program files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe [2009-2-24 391072]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

"SoftwareSASGeneration"= 1 (0x1)

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

BootExecute        REG_MULTI_SZ           autocheck autochk *\0\0sdnclean64.exe

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

@="Service"

.

--- Andere Dienste/Treiber im Speicher ---

.

*NewlyCreated* - NPF

*NewlyCreated* - WS2IFSL

.

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs

Themes

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{A8D647C8-65AC-409F-B7B2-3C0FEE1A32F2}]

2010-02-16 17:02        114688        ----a-w-        c:\program files (x86)\PixiePack Codec Pack\InstallerHelper.exe

.

Inhalt des "geplante Tasks" Ordners

.

2015-03-28 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-04-23 07:37]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

@="{472083B0-C522-11CF-8763-00608CC02F24}"

[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

2015-03-24 17:18        722400        ----a-w-        c:\program files\AVAST Software\Avast\ashShA64.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-03-30 7574048]

"Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2009-03-30 1833504]

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = https://www.google.com/?trackid=sp-006

mStart Page = https://www.google.com/?trackid=sp-006

mSearch Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}

mLocal Page = c:\windows\SysWOW64\blank.htm

mSearch Bar = https://www.google.com/?trackid=sp-006

uInternet Settings,ProxyOverride = *.local

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

IE: Nach Microsoft &Excel exportieren - c:\progra~2\MICROS~1\OFFICE11\EXCEL.EXE/3000

IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000

IE: {{92808042-fb78-4fa0-bb4f-c9a95e0e9c10} - {ba696155-d96e-4281-b467-0367a0456474} -

TCP: DhcpNameServer = 192.168.1.1

FF - ProfilePath - c:\users\Ingrid Keim\AppData\Roaming\Mozilla\Firefox\Profiles\dsglh94h.default\

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: browser.startup.homepage - hxxp://google.de/

FF - ExtSQL: !HIDDEN! 2010-07-05 13:47; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

BHO-{ba696155-d96e-4281-b467-0367a0456474} - (no file)

Toolbar-{ba696155-d96e-4281-b467-0367a0456474} - (no file)

ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - (no file)

ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - (no file)

ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - (no file)

SafeBoot-WudfPf

SafeBoot-WudfRd

ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - (no file)

ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - (no file)

ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - (no file)

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_134_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_17_0_0_134_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]

@Denied: (A 2) (Everyone)

@="IFlashBroker6"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_17_0_0_134_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_17_0_0_134_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_134.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.17"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_134.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_134.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_17_0_0_134.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]

@Denied: (A 2) (Everyone)

@="IFlashBroker6"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}]

@Denied: (A 2) (Everyone)

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0]

@="Shockwave Flash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}]

@Denied: (A 2) (Everyone)

@=""

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0]

@="FlashBroker"

.

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Classes]

"SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59,

   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\

.

------------------------ Weitere laufende Prozesse ------------------------

.

c:\program files\AVAST Software\Avast\AvastSvc.exe

c:\program files\AVAST Software\Avast\afwServ.exe

c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\program files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCameraSrv.exe

c:\program files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe

c:\program files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe

c:\program files (x86)\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe

c:\program files\AVAST Software\Avast\setup\instup.exe

.

**************************************************************************

.

Zeit der Fertigstellung: 2015-03-28  08:50:23 - PC wurde neu gestartet

ComboFix-quarantined-files.txt  2015-03-28 07:50

.

Vor Suchlauf: 10 Verzeichnis(se), 107.403.075.584 Bytes frei

Nach Suchlauf: 14 Verzeichnis(se), 107.292.835.840 Bytes frei

.

- - End Of File - - A2CCD252D36D3113F949C2ECF31281D7

--- --- ---
5C616939100B85E558DA92B899A0FC36

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Malwarebytes Anti-Malware
Malwarebytes | Free Anti-Malware & Internet Security Software

Update, 28.03.2015 13:23:36, SYSTEM, INGRIDKEIM-PC, Manual, Rootkit Database, 2015.2.25.1, 2015.3.26.1,
Update, 28.03.2015 13:23:42, SYSTEM, INGRIDKEIM-PC, Manual, Malware Database, 2015.3.9.5, 2015.3.28.2,
Scan, 28.03.2015 13:47:58, SYSTEM, INGRIDKEIM-PC, Manual, Start: 28.03.2015 13:23:58, Dauer: 22 Minuten 58 Sekunden, Bedrohungs-Suchlauf, Abgeschlossen, 0 Malwareerkennung, "879" nicht-Malwareerkennung,
Update, 28.03.2015 13:48:11, SYSTEM, INGRIDKEIM-PC, Manual, Malware Database, 2015.3.28.2, 2015.3.28.3,
Scan, 28.03.2015 14:13:37, SYSTEM, INGRIDKEIM-PC, Manual, Start: 28.03.2015 13:48:12, Dauer: 21 Minuten 12 Sekunden, Bedrohungs-Suchlauf, Abgeschlossen, 0 Malwareerkennung, "879" nicht-Malwareerkennung,
Error, 28.03.2015 14:15:39, SYSTEM, INGRIDKEIM-PC, Protection, IsLicensed, 13,
Protection, 28.03.2015 14:15:39, SYSTEM, INGRIDKEIM-PC, Protection, Malware Protection, Stopping,
Protection, 28.03.2015 14:15:39, SYSTEM, INGRIDKEIM-PC, Protection, Malware Protection, Stopped,

(end)

AdwCleaner Logfile:

Code:

# AdwCleaner v4.113 - Bericht erstellt 28/03/2015 um 14:26:17

# Aktualisiert 22/03/2015 von Xplode

# Datenbank : 2015-03-22.2 [Lokal]

# Betriebssystem : Windows (TM) Vista Home Premium Service Pack 2 (x64)

# Benutzername : Ingrid Keim - INGRIDKEIM-PC

# Gestarted von : C:\Users\Ingrid Keim\Desktop\AdwCleaner_4.113.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

[!] Ordner Gelöscht : C:\ProgramData\apn

[!] Ordner Gelöscht : C:\ProgramData\ParetoLogic

[!] Ordner Gelöscht : C:\ProgramData\driver whiz

[!] Ordner Gelöscht : C:\ProgramData\Fighters

[!] Ordner Gelöscht : C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Fighters

[!] Ordner Gelöscht : C:\Users\Ingrid Keim\AppData\Local\emaze

[!] Ordner Gelöscht : C:\Users\Ingrid Keim\AppData\LocalLow\SimplyTech

[!] Ordner Gelöscht : C:\Users\Ingrid Keim\AppData\Roaming\DriverCure

[!] Ordner Gelöscht : C:\Users\Ingrid Keim\AppData\Roaming\ParetoLogic

[!] Ordner Gelöscht : C:\Users\Ingrid Keim\AppData\Roaming\SuperEasy Software

[!] Ordner Gelöscht : C:\Users\Ingrid Keim\AppData\Roaming\Fighters
 

***** [ Geplante Tasks ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\HomeTab.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{3FC27B34-0C19-49DA-875E-1875DDD4A6B2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{5B191EA7-F309-4D2F-AAA5-C77D84D29CCD}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA696155-D96E-4281-B467-0367A0456474}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CFD485F0-96BD-47CD-BB6D-CD7DDA95F102}

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{BA696155-D96E-4281-B467-0367A0456474}]

Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}

Schlüssel Gelöscht : HKCU\Software\ICQ\ICQToolbar

Schlüssel Gelöscht : HKCU\Software\OCS

Schlüssel Gelöscht : HKCU\Software\ParetoLogic

Schlüssel Gelöscht : HKCU\Software\visualbee

Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar

Schlüssel Gelöscht : HKCU\Software\SuperEasy Software

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\simplytech

Schlüssel Gelöscht : HKLM\SOFTWARE\ICQ\ICQToolbar

Schlüssel Gelöscht : HKLM\SOFTWARE\ParetoLogic

Schlüssel Gelöscht : HKLM\SOFTWARE\VBMZ

Schlüssel Gelöscht : HKLM\SOFTWARE\visualbee

Schlüssel Gelöscht : HKLM\SOFTWARE\SuperEasy Software

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\VisualBee for Microsoft PowerPoint

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{3a4935b3-b7a0-4065-8ccc-0030471b33f1}_is1

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A71991503412AEB42838B02C5ED9F9CD

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7

Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local

Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - :0
 

***** [ Internetbrowser ] *****
 

-\\ Internet Explorer v9.0.8112.16633
 

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
 

-\\ Mozilla Firefox v36.0.4 (x86 de)
 

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("extensions.crossrider.bic", "13f80e23bb35c4e969f0f965a56535f7");

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("icqtoolbar.allowSendURL", false);

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("icqtoolbar.engineVerified", false);

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("icqtoolbar.geolastmodified", 1364317191);

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("icqtoolbar.hiddenElements", "itb_options");

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("icqtoolbar.history", "minijobs%20n%C3%BCrnberg%20wochenendelast%20minute%20wellness%20kurzurlaub%20kurzfristigromantisches%20wochenende%20zu%20zweit%20n%C3%BCrnbergwellness%20erlang[...]

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("icqtoolbar.icqgeo", 49);

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("icqtoolbar.installTime", "1334742846");

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("icqtoolbar.installsource", "1");

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("icqtoolbar.itbsitescount", 0);

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("icqtoolbar.newtab_state", "1");

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("icqtoolbar.numberOfSearches", 0);

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("icqtoolbar.previousFFVersion", "3.6.28");

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("icqtoolbar.skip_default_search", "no");

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("icqtoolbar.suggestions", false);

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("icqtoolbar.uniqueID", "127376442112737644041273858242871");

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("icqtoolbar.usageStatstTimestamp", 1364411669);

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("icqtoolbar.version", "2.0.1.5");

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("icqtoolbar.voucherHideClicks", 0);

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("icqtoolbar.voucherMoreLinkClicks", 0);

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("icqtoolbar.voucherRedeemClicks", 0);

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("icqtoolbar.voucherWasShown", 0);

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("icqtoolbar.xmlEnableSuggestions", false);

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("icqtoolbar.xmlLanguage", "de");

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("iminent.webbooster.scripts.minibar.LayoutId", "1");

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("iminent.webbooster.scripts.minibar.ROOTEXTENSION", "chrome://iminentwebbooster/content/minibar");

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.BHPCode", "01");

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.DefaultEvent", "000");

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.DefaultWebSite", "000");

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.IminentClientCode", "11");

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("iminent.webbooster.scripts.minibar.Services.SmartFavCode", "02");

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("iminent.webbooster.scripts.minibar.displayFavLinks", "1");

[dsglh94h.default\prefs.js] - Zeile Gelöscht : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent102", "1372256887763");
 

*************************
 

AdwCleaner[R0].txt - [17864 Bytes] - [28/03/2015 14:22:15]

AdwCleaner[S0].txt - [12712 Bytes] - [28/03/2015 14:26:17]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [12772  Bytes] ##########

--- --- ---JRT Logfile:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.4.7 (03.28.2015:1)

OS: Windows (TM) Vista Home Premium x64

Ran by Ingrid Keim on 28.03.2015 at 14:33:45,39

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}

Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}

Successfully deleted: [Registry Key - Orphan] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}

Successfully deleted: [Registry Key - Orphan] HKEY_CLASSES_ROOT\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}
 
 
 

~~~ Files
 

Successfully deleted: [File] "C:\Windows\launcher.exe"
 
 
 

~~~ Folders
 
 
 

~~~ FireFox
 

Successfully deleted the following from C:\Users\Ingrid Keim\AppData\Roaming\mozilla\firefox\profiles\dsglh94h.default\prefs.js
 

user_pref("HomeTab_3869.global.DisplayRecentSearches", "true");

Emptied folder: C:\Users\Ingrid Keim\AppData\Roaming\mozilla\firefox\profiles\dsglh94h.default\minidumps [75 files]
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 28.03.2015 at 14:40:19,96

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

--- --- ---

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015

Ran by Ingrid Keim (administrator) on INGRIDKEIM-PC on 28-03-2015 14:49:55

Running from C:\Users\Ingrid Keim\Downloads

Loaded Profiles: Ingrid Keim (Available profiles: Ingrid Keim)

Platform: Windows Vista (TM) Home Premium Service Pack 2 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 9 (Default browser: FF)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forum
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\afwServ.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(TOSHIBA) C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCameraSrv.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe

(NETGEAR) C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenieDaemon64.exe

(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe

(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe

(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe

(Microsoft Corporation) C:\Windows\System32\alg.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe

(Microsoft Corporation) C:\Windows\SysWOW64\conime.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7574048 2009-03-30] (Realtek Semiconductor)

HKLM\...\Run: [Skytel] => C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-03-30] (Realtek Semiconductor Corp.)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-06] (Apple Inc.)

HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [189480 2014-02-05] (Geek Software GmbH)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5512912 2015-03-24] (Avast Software s.r.o.)

HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)

HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-12-18] (Oracle Corporation)

HKU\S-1-5-18\...\Run: [TOSHIBA Online Product Information] => C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe [6158240 2009-03-16] (TOSHIBA)

Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk

ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)

Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk

ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (Avast Software s.r.o.)

ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File

BootExecute: autocheck autochk * sdnclean64.exe
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKU\S-1-5-21-833096433-3210486317-878258635-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = Google

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-833096433-3210486317-878258635-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\S-1-5-21-833096433-3210486317-878258635-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006

URLSearchHook: HKU\S-1-5-21-833096433-3210486317-878258635-1000 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}

SearchScopes: HKLM -> {C62DE3D7-45C6-4083-B7BA-690A7731943D} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSEG;

SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-833096433-3210486317-878258635-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

SearchScopes: HKU\S-1-5-21-833096433-3210486317-878258635-1000 -> {C62DE3D7-45C6-4083-B7BA-690A7731943D} URL = 

SearchScopes: HKU\S-1-5-21-833096433-3210486317-878258635-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-03-24] (Avast Software s.r.o.)

BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27] (Adobe Systems Incorporated)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2015-03-27] (Oracle Corporation)

BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-24] (Avast Software s.r.o.)

BHO-x32: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2015-03-27] (Oracle Corporation)

Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)

Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Ingrid Keim\AppData\Roaming\Mozilla\Firefox\Profiles\dsglh94h.default

FF SelectedSearchEngine: Google

FF Homepage: hxxp://google.de/

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-03-27] ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-27] ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-20] ()

FF Plugin-x32: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Users\Ingrid Keim\Downloads\Player\DivX\DivX Player\npDivxPlayerPlugin.dll No File

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)

FF Plugin-x32: @google.com/npPicasa2,version=2.0.0 -> C:\Program Files (x86)\Picasa2\npPicasa2.dll [2008-08-21] (Google, Inc.)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Picasa2\npPicasa3.dll [2014-01-06] (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.76.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-03-27] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.76.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2015-03-27] (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)

FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 -> C:\Program Files (x86)\Sony\Media Go\npmediago.dll [2013-02-14] (Sony Network Entertainment International LLC)

FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2012-07-27] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFFICE.DLL [2007-03-22] (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2012-07-27] (Adobe Systems Inc.)

FF Extension: Microsoft .NET Framework Assistant - C:\Users\Ingrid Keim\AppData\Roaming\Mozilla\Firefox\Profiles\dsglh94h.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2012-04-18]

FF Extension: Adblock Plus - C:\Users\Ingrid Keim\AppData\Roaming\Mozilla\Firefox\Profiles\dsglh94h.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-11-16]

FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension

FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2010-05-15]

FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-03-24]
 

Chrome: 

=======

CHR HKLM-x32\...\Chrome\Extension: [fgibjgmnimooanbagcfpnkmngejcojaf] - C:\Program Files (x86)\HomeTab\chrome\HomeTab.crx [Not Found]

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-24]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-03-24] (Avast Software s.r.o.)

R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [107448 2015-03-24] (Avast Software s.r.o.)

R2 camsvc; C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCameraSrv.exe [20544 2009-04-16] (TOSHIBA)

R2 ConfigFree Gadget Service; C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe [36864 2009-03-06] (TOSHIBA CORPORATION) [File not signed]

R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [906752 2008-10-16] (Hewlett-Packard Co.) [File not signed]

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-07-18] (Hewlett-Packard) [File not signed]

R2 NETGEARGenieDaemon; C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenieDaemon64.exe [231752 2012-09-25] (NETGEAR)

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-07-18] (Hewlett-Packard) [File not signed]

R2 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [116104 2009-04-21] (Toshiba Europe GmbH)

R2 TNaviSrv; C:\Program Files (x86)\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe [83312 2009-03-30] (TOSHIBA Corporation)

R2 TODDSrv; C:\Windows\system32\TODDSrv.exe [135168 2007-11-21] (TOSHIBA Corporation) [File not signed]

R2 TOSHIBA Bluetooth Service; C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [153088 2007-02-02] (TOSHIBA CORPORATION) [File not signed]

R2 TOSHIBA eco Utility Service; C:\Program Files\TOSHIBA\TECO\TecoService.exe [242176 2009-04-24] (TOSHIBA Corporation) [File not signed]

R2 TOSHIBA HDD SSD Alert Service; C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [84480 2009-03-17] (TOSHIBA Corporation) [File not signed]

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [383544 2008-01-21] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

U5 AppMgmt; C:\Windows\system32\svchost.exe [27648 2008-01-21] (Microsoft Corporation)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-03-24] ()

R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-03-24] (Avast Software s.r.o.)

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [88408 2015-03-24] (Avast Software s.r.o.)

R0 aswNdis; C:\Windows\System32\DRIVERS\aswNdis.sys [12368 2015-03-24] (ALWIL Software)

R0 aswNdis2; C:\Windows\System32\Drivers\aswNdis2.sys [331464 2015-03-24] (Avast Software s.r.o.)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [64712 2015-03-24] (Avast Software s.r.o.)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-03-24] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-03-24] (Avast Software s.r.o.)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-03-24] (Avast Software s.r.o.)

R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65224 2015-03-24] (Avast Software s.r.o.)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [271200 2015-03-24] ()

S1 Beep; No ImagePath

R0 LPCFilter; C:\Windows\SysWOW64\DRIVERS\LPCFilter.sys [32040 2008-05-07] (COMPAL ELECTRONIC INC.)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-03-17] (Malwarebytes Corporation)

R3 NPF; C:\Windows\System32\drivers\NPF.sys [35344 2013-05-19] (CACE Technologies, Inc.)

S3 rtl819xpn64; C:\Windows\System32\DRIVERS\rtl819xp.sys [564224 2009-03-09] () [File not signed]

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 cpuz132; \??\C:\Users\Stephie\AppData\Local\Temp\cpuz132\cpuz132_x64.sys [X]

S3 IpInIp; system32\DRIVERS\ipinip.sys [X]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-03-28 14:40 - 2015-03-28 14:40 - 00001758 _____ () C:\Users\Ingrid Keim\Desktop\JRT.txt

2015-03-28 14:32 - 2015-03-28 14:32 - 01389240 _____ (Thisisu) C:\Users\Ingrid Keim\Desktop\JRT.exe

2015-03-28 14:22 - 2015-03-28 14:26 - 00000000 ____D () C:\AdwCleaner

2015-03-28 14:21 - 2015-03-28 14:21 - 02168320 _____ () C:\Users\Ingrid Keim\Desktop\AdwCleaner_4.113.exe

2015-03-28 13:23 - 2015-03-28 14:17 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-03-28 13:22 - 2015-03-28 13:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-03-28 13:22 - 2015-03-28 13:22 - 00000000 ____D () C:\ProgramData\Malwarebytes

2015-03-28 13:22 - 2015-03-28 13:22 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-03-28 13:22 - 2015-03-17 06:15 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-03-28 13:22 - 2015-03-17 06:15 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-03-28 13:22 - 2015-03-17 06:15 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-03-28 13:21 - 2015-03-28 13:21 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Ingrid Keim\Downloads\mbam-setup-2.1.4.1018.exe

2015-03-28 08:50 - 2015-03-28 08:50 - 00021785 _____ () C:\ComboFix.txt

2015-03-28 08:11 - 2015-03-28 08:50 - 00000000 ____D () C:\ComboFix

2015-03-28 08:11 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe

2015-03-28 08:11 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe

2015-03-28 08:11 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2015-03-28 08:11 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2015-03-28 08:11 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2015-03-28 08:11 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe

2015-03-28 08:11 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe

2015-03-28 08:11 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe

2015-03-28 07:50 - 2015-03-28 08:50 - 00000000 ____D () C:\Qoobox

2015-03-28 07:50 - 2015-03-28 08:48 - 00000000 ____D () C:\Windows\erdnt

2015-03-28 07:49 - 2015-03-28 07:49 - 05615749 ____R (Swearware) C:\Users\Ingrid Keim\Desktop\ComboFix.exe

2015-03-27 15:08 - 2015-03-27 16:02 - 00015872 _____ () C:\Users\Ingrid Keim\Documents\Vegan Preisvergleich.xls

2015-03-27 09:01 - 2015-03-27 09:03 - 00029610 _____ () C:\Users\Ingrid Keim\Downloads\Addition.txt

2015-03-27 09:00 - 2015-03-28 14:49 - 00017850 _____ () C:\Users\Ingrid Keim\Downloads\FRST.txt

2015-03-27 09:00 - 2015-03-28 14:49 - 00000000 ____D () C:\FRST

2015-03-27 08:58 - 2015-03-27 08:58 - 02095616 _____ (Farbar) C:\Users\Ingrid Keim\Downloads\FRST64.exe

2015-03-27 08:41 - 2015-03-27 08:41 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2015-03-27 08:41 - 2015-03-27 08:41 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2015-03-27 08:41 - 2015-03-27 08:41 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2015-03-27 08:41 - 2015-03-27 08:41 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2015-03-27 08:41 - 2015-03-27 08:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2015-03-27 08:41 - 2015-03-27 08:41 - 00000000 ____D () C:\Program Files (x86)\Java

2015-03-26 19:31 - 2015-03-26 19:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2015-03-25 10:52 - 2015-03-28 13:16 - 00000552 _____ () C:\Windows\system32\spsys.log

2015-03-24 20:54 - 2015-02-20 03:03 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2015-03-24 20:54 - 2015-02-20 02:44 - 00048128 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-03-24 20:54 - 2015-02-20 01:39 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-03-24 20:54 - 2015-02-20 01:28 - 00296960 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2015-03-24 20:51 - 2014-10-13 02:12 - 02264064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2015-03-24 20:51 - 2014-10-13 01:56 - 03137536 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2015-03-24 20:49 - 2014-12-08 02:59 - 00306176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll

2015-03-24 20:49 - 2014-12-08 02:37 - 00399360 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll

2015-03-24 20:36 - 2014-11-26 03:05 - 00564224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2015-03-24 20:36 - 2014-11-26 02:42 - 00847360 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2015-03-24 20:35 - 2015-01-29 02:35 - 00975360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2015-03-24 20:35 - 2015-01-29 02:33 - 01209856 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2015-03-24 20:34 - 2014-12-19 01:26 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2015-03-24 20:33 - 2015-01-21 03:02 - 00807936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll

2015-03-24 20:33 - 2015-01-21 02:42 - 01040896 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2015-03-24 20:32 - 2014-08-23 02:05 - 00304128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2015-03-24 20:32 - 2014-08-23 01:42 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-03-24 20:29 - 2015-03-24 20:29 - 00342390 _____ () C:\Windows\dd_vstor40_lp_x64_deuUI67DE.txt

2015-03-24 20:29 - 2015-03-24 20:29 - 00046838 _____ () C:\Windows\dd_vstor40_lp_x64_deuMSI67DE.txt

2015-03-24 20:29 - 2014-11-04 01:35 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2015-03-24 20:29 - 2014-11-04 01:19 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2015-03-24 20:27 - 2014-08-12 03:25 - 00729600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL

2015-03-24 20:27 - 2014-08-12 03:11 - 00923136 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL

2015-03-24 20:26 - 2015-02-26 01:31 - 02792960 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-03-24 20:18 - 2014-06-15 23:18 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll

2015-03-24 20:18 - 2014-06-15 23:18 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll

2015-03-24 20:18 - 2014-06-13 19:22 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll

2015-03-24 20:18 - 2014-06-13 19:22 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll

2015-03-24 20:18 - 2014-06-13 18:36 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll

2015-03-24 20:18 - 2014-06-13 18:36 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll

2015-03-24 20:17 - 2015-02-18 03:02 - 11587584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2015-03-24 20:17 - 2015-02-18 02:42 - 12899840 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2015-03-24 20:17 - 2014-10-24 02:03 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-03-24 20:17 - 2014-10-24 01:39 - 00656384 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-03-24 20:08 - 2014-10-10 02:10 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2015-03-24 20:08 - 2014-10-10 02:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-03-24 20:08 - 2014-10-10 02:00 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-03-24 20:08 - 2014-10-10 00:53 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-03-24 20:08 - 2014-10-10 00:22 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-03-24 20:04 - 2014-06-26 23:17 - 01389200 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe

2015-03-24 20:04 - 2014-06-26 23:17 - 00619664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe

2015-03-24 20:04 - 2014-06-26 23:17 - 00171152 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll

2015-03-24 20:04 - 2014-06-26 23:17 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll

2015-03-24 20:04 - 2014-06-26 23:17 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll

2015-03-24 20:04 - 2014-06-26 23:17 - 00008848 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll

2015-03-24 20:04 - 2014-06-06 05:29 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2015-03-24 20:04 - 2014-06-06 05:28 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe

2015-03-24 20:02 - 2014-10-03 02:18 - 00274432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll

2015-03-24 20:02 - 2014-10-03 02:17 - 00396800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2015-03-24 20:02 - 2014-10-03 02:17 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2015-03-24 20:02 - 2014-10-03 02:03 - 00313344 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2015-03-24 20:02 - 2014-10-03 02:02 - 00201728 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2015-03-24 20:02 - 2014-10-03 02:01 - 00474624 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2015-03-24 20:02 - 2014-10-03 02:01 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2015-03-24 20:02 - 2014-10-03 00:49 - 00088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\audiodg.exe

2015-03-24 20:01 - 2015-03-24 20:02 - 00457682 _____ () C:\Windows\dd_vstor40_lp_x64_deuMSI52C5.txt

2015-03-24 20:01 - 2015-03-24 20:02 - 00339696 _____ () C:\Windows\dd_vstor40_lp_x64_deuUI52C5.txt

2015-03-24 19:58 - 2015-03-24 20:01 - 02071026 _____ () C:\Windows\dd_vstor40_x64MSI5011.txt

2015-03-24 19:58 - 2015-03-24 20:01 - 00339716 _____ () C:\Windows\dd_vstor40_x64UI5011.txt

2015-03-24 19:47 - 2015-01-29 02:35 - 00369664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2015-03-24 19:47 - 2015-01-29 02:33 - 00449024 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2015-03-24 19:45 - 2014-12-06 04:14 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll

2015-03-24 19:45 - 2014-12-06 04:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll

2015-03-24 19:45 - 2014-12-06 03:54 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll

2015-03-24 19:45 - 2014-12-06 03:54 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll

2015-03-24 19:44 - 2014-12-06 03:54 - 00178688 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2015-03-24 19:44 - 2014-10-24 02:04 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll

2015-03-24 19:44 - 2014-10-24 01:39 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2015-03-24 19:44 - 2014-09-05 00:38 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys

2015-03-24 19:44 - 2014-08-27 01:55 - 01249280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2015-03-24 19:44 - 2014-08-27 01:55 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2015-03-24 19:44 - 2014-08-27 01:41 - 01869824 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-03-24 19:44 - 2014-08-27 01:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-03-24 19:43 - 2015-02-26 02:40 - 04692408 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-03-24 19:43 - 2015-01-09 02:41 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-03-24 19:43 - 2015-01-09 01:29 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-03-24 19:40 - 2015-03-06 05:01 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-03-24 19:40 - 2015-03-06 04:35 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-03-24 19:40 - 2015-01-15 07:53 - 00077312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-03-24 19:40 - 2015-01-15 05:08 - 00516536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-03-24 19:40 - 2014-10-10 02:09 - 01689600 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-03-24 18:57 - 2015-02-21 20:17 - 17882624 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-03-24 18:57 - 2015-02-21 20:07 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-03-24 18:57 - 2015-02-21 20:02 - 10931200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-03-24 18:57 - 2015-02-21 20:00 - 02339840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-03-24 18:57 - 2015-02-21 19:54 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-03-24 18:57 - 2015-02-21 19:54 - 01388032 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-03-24 18:57 - 2015-02-21 19:53 - 01494016 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-03-24 18:57 - 2015-02-21 19:52 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2015-03-24 18:57 - 2015-02-21 19:52 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-03-24 18:57 - 2015-02-21 19:52 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-03-24 18:57 - 2015-02-21 19:51 - 02157568 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-03-24 18:57 - 2015-02-21 19:51 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-03-24 18:57 - 2015-02-21 19:51 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-03-24 18:57 - 2015-02-21 19:51 - 00598528 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-03-24 18:57 - 2015-02-21 19:51 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-03-24 18:57 - 2015-02-21 19:51 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-03-24 18:57 - 2015-02-21 19:51 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2015-03-24 18:57 - 2015-02-21 19:51 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2015-03-24 18:57 - 2015-02-21 19:50 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-03-24 18:57 - 2015-02-21 19:50 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-03-24 18:57 - 2015-02-21 19:50 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-03-24 18:57 - 2015-02-21 19:50 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2015-03-24 18:57 - 2015-02-21 18:37 - 12375040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-03-24 18:57 - 2015-02-21 18:34 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-03-24 18:57 - 2015-02-21 18:29 - 09747968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-03-24 18:57 - 2015-02-21 18:28 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-03-24 18:57 - 2015-02-21 18:22 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-03-24 18:57 - 2015-02-21 18:21 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-03-24 18:57 - 2015-02-21 18:21 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-03-24 18:57 - 2015-02-21 18:20 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2015-03-24 18:57 - 2015-02-21 18:20 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-03-24 18:57 - 2015-02-21 18:19 - 01803264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-03-24 18:57 - 2015-02-21 18:19 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-03-24 18:57 - 2015-02-21 18:19 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-03-24 18:57 - 2015-02-21 18:19 - 00421376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-03-24 18:57 - 2015-02-21 18:19 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-03-24 18:57 - 2015-02-21 18:18 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-03-24 18:57 - 2015-02-21 18:18 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-03-24 18:57 - 2015-02-21 18:18 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-03-24 18:57 - 2015-02-21 18:18 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-03-24 18:57 - 2015-02-21 18:18 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2015-03-24 18:57 - 2015-02-21 18:18 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2015-03-24 18:57 - 2015-02-21 18:18 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2015-03-24 18:57 - 2015-02-21 18:17 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-03-24 18:57 - 2014-06-14 01:56 - 00901568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2015-03-24 18:57 - 2014-06-14 01:51 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll

2015-03-24 18:56 - 2014-06-06 09:59 - 00506880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2015-03-24 18:56 - 2014-06-06 08:13 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2015-03-24 18:56 - 2014-06-02 22:30 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2015-03-24 18:56 - 2014-06-02 22:29 - 02280448 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2015-03-24 18:56 - 2014-06-02 22:29 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2015-03-24 18:56 - 2014-06-02 21:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2015-03-24 18:56 - 2014-06-02 11:31 - 00332800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll

2015-03-24 18:56 - 2014-06-02 11:30 - 01993728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2015-03-24 18:56 - 2014-05-30 08:10 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2015-03-24 18:33 - 2015-03-24 18:33 - 00000000 ____D () C:\Users\Ingrid Keim\AppData\Roaming\AVAST Software

2015-03-24 18:20 - 2015-03-24 18:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software

2015-03-24 18:19 - 2015-03-27 08:25 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update

2015-03-24 18:18 - 2015-03-24 18:18 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys

2015-03-24 18:18 - 2015-03-24 18:18 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys

2015-03-24 18:18 - 2015-03-24 18:18 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe

2015-03-24 18:18 - 2015-03-24 18:18 - 00331464 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswNdis2.sys

2015-03-24 18:18 - 2015-03-24 18:18 - 00271200 _____ () C:\Windows\system32\Drivers\aswVmm.sys

2015-03-24 18:18 - 2015-03-24 18:18 - 00088408 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys

2015-03-24 18:18 - 2015-03-24 18:18 - 00065736 _____ () C:\Windows\system32\Drivers\aswRvrt.sys

2015-03-24 18:18 - 2015-03-24 18:18 - 00065224 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswTdi.sys

2015-03-24 18:18 - 2015-03-24 18:18 - 00064712 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr.sys

2015-03-24 18:18 - 2015-03-24 18:18 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr

2015-03-24 18:18 - 2015-03-24 18:18 - 00029168 _____ () C:\Windows\system32\Drivers\aswHwid.sys

2015-03-24 18:18 - 2015-03-24 18:18 - 00028144 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswKbd.sys

2015-03-24 18:18 - 2015-03-24 18:18 - 00012368 _____ (ALWIL Software) C:\Windows\system32\Drivers\aswNdis.sys

2015-03-24 18:15 - 2015-03-24 18:15 - 00000000 ____D () C:\Program Files\AVAST Software

2015-03-24 18:14 - 2015-03-24 18:14 - 05453024 _____ (Avast Software s.r.o.) C:\Users\Ingrid Keim\Downloads\avast_premier_antivirus_setup_online.exe

2015-03-24 18:14 - 2015-03-24 18:14 - 00000000 ____D () C:\ProgramData\AVAST Software

2015-03-24 18:12 - 2015-03-24 18:12 - 07709864 _____ (McAfee, Inc.) C:\Users\Ingrid Keim\Downloads\Setup_serial_EuzO071l5E56nYjTuLzYOw2_key.exe

2015-03-24 18:08 - 2015-03-24 18:08 - 05315120 _____ (McAfee, Inc.) C:\Users\Ingrid Keim\Downloads\Setup_serial_sBpPxkZHpiFZsbQi36ZJeQ2_key.exe

2015-03-24 17:59 - 2015-03-24 18:05 - 00000000 ____D () C:\Program Files (x86)\SafeKey

2015-03-24 17:43 - 2015-03-25 10:46 - 00000000 ____D () C:\Program Files\Common Files\McAfee

2015-03-24 17:42 - 2015-03-24 17:59 - 26064960 _____ (McAfee, Inc.) C:\Users\Ingrid Keim\Downloads\Setup_serial_j9OgRELm4KqYxWZmBX5ckQ2_key.exe
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-03-28 14:41 - 2013-04-23 19:09 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-03-28 14:34 - 2008-01-21 12:10 - 01566772 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-03-28 14:34 - 2008-01-21 12:09 - 00674098 _____ () C:\Windows\system32\perfh007.dat

2015-03-28 14:34 - 2008-01-21 12:09 - 00146078 _____ () C:\Windows\system32\perfc007.dat

2015-03-28 14:33 - 2009-08-01 15:46 - 01945360 _____ () C:\Windows\WindowsUpdate.log

2015-03-28 14:28 - 2014-06-20 10:33 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics

2015-03-28 14:27 - 2013-11-17 11:00 - 00289116 _____ () C:\Windows\PFRO.log

2015-03-28 14:27 - 2006-11-02 16:42 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-03-28 14:27 - 2006-11-02 16:22 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2015-03-28 14:27 - 2006-11-02 16:22 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2015-03-28 14:26 - 2009-08-16 17:34 - 00000012 _____ () C:\Windows\bthservsdp.dat

2015-03-28 14:26 - 2006-11-02 16:42 - 00032510 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2015-03-28 14:14 - 2010-05-14 18:30 - 00000000 ____D () C:\ProgramData\ICQ

2015-03-28 14:14 - 2006-11-02 14:34 - 00000000 ____D () C:\Windows\tracing

2015-03-28 09:25 - 2006-11-02 14:33 - 00000000 ____D () C:\Windows\rescache

2015-03-28 08:50 - 2006-11-02 14:33 - 00000000 __RHD () C:\Users\Default

2015-03-28 08:45 - 2006-11-02 13:34 - 00000215 _____ () C:\Windows\system.ini

2015-03-28 07:44 - 2013-11-17 11:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2015-03-27 10:27 - 2009-06-05 16:32 - 00000000 ____D () C:\ProgramData\Microsoft Help

2015-03-27 08:40 - 2013-06-26 15:27 - 00000000 ____D () C:\Program Files (x86)\7-Zip

2015-03-27 08:40 - 2010-05-13 16:25 - 00000000 ____D () C:\Program Files (x86)\DivX

2015-03-27 08:40 - 2010-05-13 16:23 - 00000000 ____D () C:\ProgramData\DivX

2015-03-27 08:39 - 2010-05-13 16:27 - 00000000 ____D () C:\Users\Ingrid Keim\AppData\Roaming\DivX

2015-03-27 08:39 - 2010-05-13 16:27 - 00000000 ____D () C:\Program Files\DivX

2015-03-27 08:39 - 2009-08-02 15:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX

2015-03-27 08:38 - 2010-08-22 19:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

2015-03-27 08:37 - 2013-04-23 19:09 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-03-27 08:37 - 2013-04-23 19:09 - 00003736 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-03-27 08:37 - 2013-03-18 19:31 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-03-27 08:26 - 2014-02-28 17:08 - 00003266 _____ () C:\Windows\setupact.log

2015-03-25 10:50 - 2006-11-02 16:21 - 00344648 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-03-25 10:47 - 2006-11-02 16:07 - 00000000 ____D () C:\Program Files\Windows Journal

2015-03-24 20:16 - 2014-02-28 15:15 - 01543164 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2015-03-24 19:57 - 2013-08-14 19:05 - 00000000 ____D () C:\Windows\system32\MRT

2015-03-24 19:48 - 2010-08-20 16:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2015-03-24 19:48 - 2010-08-20 16:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

2015-03-24 18:19 - 2009-08-02 13:07 - 00000000 ____D () C:\Users\Ingrid Keim

2015-03-24 17:45 - 2013-08-28 18:53 - 00000000 ____D () C:\ProgramData\Avira

2015-03-24 17:43 - 2009-06-05 16:19 - 00000000 ____D () C:\ProgramData\McAfee

2015-02-26 21:14 - 2006-11-02 13:35 - 122905848 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
 

==================== Files in the root of some directories =======
 

2013-08-15 20:29 - 2013-08-15 20:29 - 0000732 _____ () C:\Users\Ingrid Keim\AppData\Local\d3d9caps64.dat

2013-10-22 14:47 - 2014-03-27 20:18 - 0008192 _____ () C:\Users\Ingrid Keim\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2010-05-13 16:26 - 2010-05-13 16:26 - 0424868 _____ () C:\Users\Ingrid Keim\AppData\Local\dd_vcredistMSI21C6.txt

2010-05-13 16:26 - 2010-05-13 16:26 - 0011722 _____ () C:\Users\Ingrid Keim\AppData\Local\dd_vcredistUI21C6.txt

2013-12-10 20:40 - 2013-12-10 20:40 - 0014702 _____ () C:\Users\Ingrid Keim\AppData\Local\dd_vcredistUI4BD4.txt

2013-06-26 15:25 - 2013-06-26 15:26 - 1077698 _____ () C:\Users\Ingrid Keim\AppData\Local\dd_vstor40_x64MSI627A.txt

2013-06-26 15:25 - 2013-06-26 15:26 - 0012510 _____ () C:\Users\Ingrid Keim\AppData\Local\dd_vstor40_x64UI627A.txt

2010-08-16 18:31 - 2010-08-20 16:42 - 0005409 _____ () C:\ProgramData\hpzinstall.log
 

Some content of TEMP:

====================

C:\Users\Ingrid Keim\AppData\Local\temp\Quarantine.exe

C:\Users\Ingrid Keim\AppData\Local\temp\sqlite3.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-03-28 14:33
 

==================== End Of Log ============================

--- --- ---

--- --- ---

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=5a7c6dc8de315944bbf702aaa2366ad6
# engine=23136
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-03-29 10:13:58
# local_time=2015-03-29 12:13:58 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode_1=''
# compatibility_mode=5892 16776574 100 100 0 265147943 0 0
# scanned=128391
# found=0
# cleaned=0
# scan_time=6027
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=5a7c6dc8de315944bbf702aaa2366ad6
# engine=23136
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-03-29 11:11:29
# local_time=2015-03-29 01:11:29 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=5.1.2600 NT Service Pack 2
# compatibility_mode_1=''
# compatibility_mode=5892 16776574 100 100 0 265151395 0 0
# scanned=59669
# found=0
# cleaned=0
# scan_time=3165

Results of screen317's Security Check version 0.99.97
Windows Vista Service Pack 2 x64 (UAC is enabled)
Internet Explorer 9
Internet Explorer 8
``````````````Antivirus/Firewall Check:``````````````
avast! Antivirus
Antivirus up to date! (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
Java 7 Update 76
Java 64-bit 8 Update 31
Adobe Flash Player 17.0.0.134
Adobe Reader 10.1.4 Adobe Reader out of Date!
Mozilla Firefox (36.0.4)
````````Process Check: objlist.exe by Laurent````````
AVAST Software Avast AvastSvc.exe
AVAST Software Avast afwServ.exe
AVAST Software Avast AvastUI.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: %
````````````````````End of Log``````````````````````

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015

Ran by Ingrid Keim (administrator) on INGRIDKEIM-PC on 29-03-2015 13:23:15

Running from C:\Users\Ingrid Keim\Downloads

Loaded Profiles: Ingrid Keim (Available profiles: Ingrid Keim)

Platform: Windows Vista (TM) Home Premium Service Pack 2 (X64) OS Language: Deutsch (Deutschland)

Internet Explorer Version 9 (Default browser: FF)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forum
 

==================== Processes (Whitelisted) =================
 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe

(AMD) C:\Windows\System32\atieclxx.exe

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\afwServ.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(TOSHIBA) C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCameraSrv.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe

(NETGEAR) C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenieDaemon64.exe

() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe

(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe

(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Microsoft Corporation) C:\Windows\System32\alg.exe

(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Microsoft Corporation) C:\Windows\SysWOW64\conime.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 

==================== Registry (Whitelisted) ==================
 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7574048 2009-03-30] (Realtek Semiconductor)

HKLM\...\Run: [Skytel] => C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-03-30] (Realtek Semiconductor Corp.)

HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-06] (Apple Inc.)

HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [189480 2014-02-05] (Geek Software GmbH)

HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5512912 2015-03-24] (Avast Software s.r.o.)

HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)

HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-12-18] (Oracle Corporation)

HKU\S-1-5-18\...\Run: [TOSHIBA Online Product Information] => C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe [6158240 2009-03-16] (TOSHIBA)

Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk

ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)

Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk

ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (Avast Software s.r.o.)

ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File

ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File

BootExecute: autocheck autochk * sdnclean64.exe
 

==================== Internet (Whitelisted) ====================
 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 

HKU\S-1-5-21-833096433-3210486317-878258635-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = Google

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-833096433-3210486317-878258635-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\S-1-5-21-833096433-3210486317-878258635-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006

URLSearchHook: HKU\S-1-5-21-833096433-3210486317-878258635-1000 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}

SearchScopes: HKLM -> {C62DE3D7-45C6-4083-B7BA-690A7731943D} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSEG;

SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-833096433-3210486317-878258635-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 

SearchScopes: HKU\S-1-5-21-833096433-3210486317-878258635-1000 -> {C62DE3D7-45C6-4083-B7BA-690A7731943D} URL = 

SearchScopes: HKU\S-1-5-21-833096433-3210486317-878258635-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-03-24] (Avast Software s.r.o.)

BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27] (Adobe Systems Incorporated)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2015-03-27] (Oracle Corporation)

BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-24] (Avast Software s.r.o.)

BHO-x32: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2015-03-27] (Oracle Corporation)

Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)

Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\Ingrid Keim\AppData\Roaming\Mozilla\Firefox\Profiles\dsglh94h.default

FF SelectedSearchEngine: Google

FF Homepage: hxxp://google.de/

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-03-27] ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-27] ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-20] ()

FF Plugin-x32: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Users\Ingrid Keim\Downloads\Player\DivX\DivX Player\npDivxPlayerPlugin.dll No File

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)

FF Plugin-x32: @google.com/npPicasa2,version=2.0.0 -> C:\Program Files (x86)\Picasa2\npPicasa2.dll [2008-08-21] (Google, Inc.)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Picasa2\npPicasa3.dll [2014-01-06] (Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=10.76.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-03-27] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.76.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2015-03-27] (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)

FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 -> C:\Program Files (x86)\Sony\Media Go\npmediago.dll [2013-02-14] (Sony Network Entertainment International LLC)

FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2012-07-27] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFFICE.DLL [2007-03-22] (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2012-07-27] (Adobe Systems Inc.)

FF Extension: Microsoft .NET Framework Assistant - C:\Users\Ingrid Keim\AppData\Roaming\Mozilla\Firefox\Profiles\dsglh94h.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2012-04-18]

FF Extension: Adblock Plus - C:\Users\Ingrid Keim\AppData\Roaming\Mozilla\Firefox\Profiles\dsglh94h.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-11-16]

FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension

FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2010-05-15]

FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-03-24]
 

Chrome: 

=======

CHR HKLM-x32\...\Chrome\Extension: [fgibjgmnimooanbagcfpnkmngejcojaf] - C:\Program Files (x86)\HomeTab\chrome\HomeTab.crx [Not Found]

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-24]
 

==================== Services (Whitelisted) =================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-03-24] (Avast Software s.r.o.)

R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [107448 2015-03-24] (Avast Software s.r.o.)

R2 camsvc; C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCameraSrv.exe [20544 2009-04-16] (TOSHIBA)

R2 ConfigFree Gadget Service; C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe [36864 2009-03-06] (TOSHIBA CORPORATION) [File not signed]

R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [906752 2008-10-16] (Hewlett-Packard Co.) [File not signed]

S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-07-18] (Hewlett-Packard) [File not signed]

R2 NETGEARGenieDaemon; C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenieDaemon64.exe [231752 2012-09-25] (NETGEAR)

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-07-18] (Hewlett-Packard) [File not signed]

R2 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [116104 2009-04-21] (Toshiba Europe GmbH)

R2 TNaviSrv; C:\Program Files (x86)\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe [83312 2009-03-30] (TOSHIBA Corporation)

R2 TODDSrv; C:\Windows\system32\TODDSrv.exe [135168 2007-11-21] (TOSHIBA Corporation) [File not signed]

R2 TOSHIBA Bluetooth Service; C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [153088 2007-02-02] (TOSHIBA CORPORATION) [File not signed]

R2 TOSHIBA eco Utility Service; C:\Program Files\TOSHIBA\TECO\TecoService.exe [242176 2009-04-24] (TOSHIBA Corporation) [File not signed]

R2 TOSHIBA HDD SSD Alert Service; C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [84480 2009-03-17] (TOSHIBA Corporation) [File not signed]

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [383544 2008-01-21] (Microsoft Corporation)
 

==================== Drivers (Whitelisted) ====================
 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 

U5 AppMgmt; C:\Windows\system32\svchost.exe [27648 2008-01-21] (Microsoft Corporation)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-03-24] ()

R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-03-24] (Avast Software s.r.o.)

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [88408 2015-03-24] (Avast Software s.r.o.)

R0 aswNdis; C:\Windows\System32\DRIVERS\aswNdis.sys [12368 2015-03-24] (ALWIL Software)

R0 aswNdis2; C:\Windows\System32\Drivers\aswNdis2.sys [331464 2015-03-24] (Avast Software s.r.o.)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [64712 2015-03-24] (Avast Software s.r.o.)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-03-24] ()

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-03-24] (Avast Software s.r.o.)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-03-24] (Avast Software s.r.o.)

R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65224 2015-03-24] (Avast Software s.r.o.)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [271200 2015-03-24] ()

S1 Beep; No ImagePath

R0 LPCFilter; C:\Windows\SysWOW64\DRIVERS\LPCFilter.sys [32040 2008-05-07] (COMPAL ELECTRONIC INC.)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-03-17] (Malwarebytes Corporation)

S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-03-17] (Malwarebytes Corporation)

R3 NPF; C:\Windows\System32\drivers\NPF.sys [35344 2013-05-19] (CACE Technologies, Inc.)

S3 rtl819xpn64; C:\Windows\System32\DRIVERS\rtl819xp.sys [564224 2009-03-09] () [File not signed]

S3 catchme; \??\C:\ComboFix\catchme.sys [X]

S3 cpuz132; \??\C:\Users\Stephie\AppData\Local\Temp\cpuz132\cpuz132_x64.sys [X]

S3 IpInIp; system32\DRIVERS\ipinip.sys [X]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 

==================== One Month Created Files and Folders ========
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-03-29 13:16 - 2015-03-29 13:16 - 00852604 _____ () C:\Users\Ingrid Keim\Desktop\SecurityCheck.exe

2015-03-29 12:14 - 2015-03-29 12:14 - 00003118 _____ () C:\Windows\System32\Tasks\{CD518AB0-C340-4537-AC2B-4213EDB326D1}

2015-03-29 10:29 - 2015-03-29 10:29 - 02347384 _____ (ESET) C:\Users\Ingrid Keim\Downloads\esetsmartinstaller_deu.exe

2015-03-28 15:32 - 2015-03-28 15:32 - 01389240 _____ (Thisisu) C:\Users\Ingrid Keim\Desktop\JRT.exe

2015-03-28 15:22 - 2015-03-28 15:26 - 00000000 ____D () C:\AdwCleaner

2015-03-28 15:21 - 2015-03-28 15:21 - 02168320 _____ () C:\Users\Ingrid Keim\Desktop\AdwCleaner_4.113.exe

2015-03-28 14:23 - 2015-03-28 15:17 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-03-28 14:22 - 2015-03-28 14:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-03-28 14:22 - 2015-03-28 14:22 - 00000000 ____D () C:\ProgramData\Malwarebytes

2015-03-28 14:22 - 2015-03-28 14:22 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-03-28 14:22 - 2015-03-17 07:15 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-03-28 14:22 - 2015-03-17 07:15 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-03-28 14:22 - 2015-03-17 07:15 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-03-28 14:21 - 2015-03-28 14:21 - 21540440 _____ (Malwarebytes Corporation ) C:\Users\Ingrid Keim\Downloads\mbam-setup-2.1.4.1018.exe

2015-03-28 09:50 - 2015-03-28 09:50 - 00021785 _____ () C:\ComboFix.txt

2015-03-28 09:11 - 2015-03-28 09:50 - 00000000 ____D () C:\ComboFix

2015-03-28 09:11 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe

2015-03-28 09:11 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe

2015-03-28 09:11 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2015-03-28 09:11 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2015-03-28 09:11 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2015-03-28 09:11 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe

2015-03-28 09:11 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe

2015-03-28 09:11 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe

2015-03-28 08:50 - 2015-03-28 09:50 - 00000000 ____D () C:\Qoobox

2015-03-28 08:50 - 2015-03-28 09:48 - 00000000 ____D () C:\Windows\erdnt

2015-03-28 08:49 - 2015-03-28 08:49 - 05615749 ____R (Swearware) C:\Users\Ingrid Keim\Desktop\ComboFix.exe

2015-03-27 16:08 - 2015-03-27 17:02 - 00015872 _____ () C:\Users\Ingrid Keim\Documents\Vegan Preisvergleich.xls

2015-03-27 10:01 - 2015-03-27 10:03 - 00029610 _____ () C:\Users\Ingrid Keim\Downloads\Addition.txt

2015-03-27 10:00 - 2015-03-29 13:23 - 00018021 _____ () C:\Users\Ingrid Keim\Downloads\FRST.txt

2015-03-27 10:00 - 2015-03-29 13:23 - 00000000 ____D () C:\FRST

2015-03-27 09:58 - 2015-03-27 09:58 - 02095616 _____ (Farbar) C:\Users\Ingrid Keim\Downloads\FRST64.exe

2015-03-27 09:41 - 2015-03-27 09:41 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2015-03-27 09:41 - 2015-03-27 09:41 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2015-03-27 09:41 - 2015-03-27 09:41 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2015-03-27 09:41 - 2015-03-27 09:41 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2015-03-27 09:41 - 2015-03-27 09:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2015-03-27 09:41 - 2015-03-27 09:41 - 00000000 ____D () C:\Program Files (x86)\Java

2015-03-26 20:31 - 2015-03-26 20:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2015-03-25 11:52 - 2015-03-28 14:16 - 00000552 _____ () C:\Windows\system32\spsys.log

2015-03-24 21:54 - 2015-02-20 04:03 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2015-03-24 21:54 - 2015-02-20 03:44 - 00048128 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-03-24 21:54 - 2015-02-20 02:39 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-03-24 21:54 - 2015-02-20 02:28 - 00296960 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2015-03-24 21:51 - 2014-10-13 03:12 - 02264064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2015-03-24 21:51 - 2014-10-13 02:56 - 03137536 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2015-03-24 21:49 - 2014-12-08 03:59 - 00306176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scesrv.dll

2015-03-24 21:49 - 2014-12-08 03:37 - 00399360 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll

2015-03-24 21:36 - 2014-11-26 04:05 - 00564224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2015-03-24 21:36 - 2014-11-26 03:42 - 00847360 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2015-03-24 21:35 - 2015-01-29 03:35 - 00975360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2015-03-24 21:35 - 2015-01-29 03:33 - 01209856 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2015-03-24 21:34 - 2014-12-19 02:26 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys

2015-03-24 21:33 - 2015-01-21 04:02 - 00807936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll

2015-03-24 21:33 - 2015-01-21 03:42 - 01040896 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll

2015-03-24 21:32 - 2014-08-23 03:05 - 00304128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2015-03-24 21:32 - 2014-08-23 02:42 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2015-03-24 21:29 - 2015-03-24 21:29 - 00342390 _____ () C:\Windows\dd_vstor40_lp_x64_deuUI67DE.txt

2015-03-24 21:29 - 2015-03-24 21:29 - 00046838 _____ () C:\Windows\dd_vstor40_lp_x64_deuMSI67DE.txt

2015-03-24 21:29 - 2014-11-04 02:35 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2015-03-24 21:29 - 2014-11-04 02:19 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2015-03-24 21:27 - 2014-08-12 04:25 - 00729600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL

2015-03-24 21:27 - 2014-08-12 04:11 - 00923136 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL

2015-03-24 21:26 - 2015-02-26 02:31 - 02792960 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-03-24 21:18 - 2014-06-16 00:18 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll

2015-03-24 21:18 - 2014-06-16 00:18 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll

2015-03-24 21:18 - 2014-06-13 20:22 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll

2015-03-24 21:18 - 2014-06-13 20:22 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll

2015-03-24 21:18 - 2014-06-13 19:36 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll

2015-03-24 21:18 - 2014-06-13 19:36 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll

2015-03-24 21:17 - 2015-02-18 04:02 - 11587584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2015-03-24 21:17 - 2015-02-18 03:42 - 12899840 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2015-03-24 21:17 - 2014-10-24 03:03 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-03-24 21:17 - 2014-10-24 02:39 - 00656384 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-03-24 21:08 - 2014-10-10 03:10 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll

2015-03-24 21:08 - 2014-10-10 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2015-03-24 21:08 - 2014-10-10 03:00 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2015-03-24 21:08 - 2014-10-10 01:53 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2015-03-24 21:08 - 2014-10-10 01:22 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2015-03-24 21:04 - 2014-06-27 00:17 - 01389200 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe

2015-03-24 21:04 - 2014-06-27 00:17 - 00619664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe

2015-03-24 21:04 - 2014-06-27 00:17 - 00171152 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll

2015-03-24 21:04 - 2014-06-27 00:17 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll

2015-03-24 21:04 - 2014-06-27 00:17 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll

2015-03-24 21:04 - 2014-06-27 00:17 - 00008848 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll

2015-03-24 21:04 - 2014-06-06 06:29 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe

2015-03-24 21:04 - 2014-06-06 06:28 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe

2015-03-24 21:02 - 2014-10-03 03:18 - 00274432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll

2015-03-24 21:02 - 2014-10-03 03:17 - 00396800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2015-03-24 21:02 - 2014-10-03 03:17 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2015-03-24 21:02 - 2014-10-03 03:03 - 00313344 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll

2015-03-24 21:02 - 2014-10-03 03:02 - 00201728 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll

2015-03-24 21:02 - 2014-10-03 03:01 - 00474624 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll

2015-03-24 21:02 - 2014-10-03 03:01 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll

2015-03-24 21:02 - 2014-10-03 01:49 - 00088576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\audiodg.exe

2015-03-24 21:01 - 2015-03-24 21:02 - 00457682 _____ () C:\Windows\dd_vstor40_lp_x64_deuMSI52C5.txt

2015-03-24 21:01 - 2015-03-24 21:02 - 00339696 _____ () C:\Windows\dd_vstor40_lp_x64_deuUI52C5.txt

2015-03-24 20:58 - 2015-03-24 21:01 - 02071026 _____ () C:\Windows\dd_vstor40_x64MSI5011.txt

2015-03-24 20:58 - 2015-03-24 21:01 - 00339716 _____ () C:\Windows\dd_vstor40_x64UI5011.txt

2015-03-24 20:47 - 2015-01-29 03:35 - 00369664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2015-03-24 20:47 - 2015-01-29 03:33 - 00449024 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2015-03-24 20:45 - 2014-12-06 05:14 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll

2015-03-24 20:45 - 2014-12-06 05:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll

2015-03-24 20:45 - 2014-12-06 04:54 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll

2015-03-24 20:45 - 2014-12-06 04:54 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll

2015-03-24 20:44 - 2014-12-06 04:54 - 00178688 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2015-03-24 20:44 - 2014-10-24 03:04 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll

2015-03-24 20:44 - 2014-10-24 02:39 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2015-03-24 20:44 - 2014-09-05 01:38 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys

2015-03-24 20:44 - 2014-08-27 02:55 - 01249280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2015-03-24 20:44 - 2014-08-27 02:55 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2015-03-24 20:44 - 2014-08-27 02:41 - 01869824 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2015-03-24 20:44 - 2014-08-27 02:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2015-03-24 20:43 - 2015-02-26 03:40 - 04692408 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-03-24 20:43 - 2015-01-09 03:41 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2015-03-24 20:43 - 2015-01-09 02:29 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2015-03-24 20:40 - 2015-03-06 06:01 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-03-24 20:40 - 2015-03-06 05:35 - 00347136 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-03-24 20:40 - 2015-01-15 08:53 - 00077312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-03-24 20:40 - 2015-01-15 06:08 - 00516536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-03-24 20:40 - 2014-10-10 03:09 - 01689600 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2015-03-24 19:57 - 2015-02-21 21:17 - 17882624 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-03-24 19:57 - 2015-02-21 21:07 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-03-24 19:57 - 2015-02-21 21:02 - 10931200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-03-24 19:57 - 2015-02-21 21:00 - 02339840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-03-24 19:57 - 2015-02-21 20:54 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-03-24 19:57 - 2015-02-21 20:54 - 01388032 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-03-24 19:57 - 2015-02-21 20:53 - 01494016 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-03-24 19:57 - 2015-02-21 20:52 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2015-03-24 19:57 - 2015-02-21 20:52 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-03-24 19:57 - 2015-02-21 20:52 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-03-24 19:57 - 2015-02-21 20:51 - 02157568 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-03-24 19:57 - 2015-02-21 20:51 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-03-24 19:57 - 2015-02-21 20:51 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-03-24 19:57 - 2015-02-21 20:51 - 00598528 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-03-24 19:57 - 2015-02-21 20:51 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-03-24 19:57 - 2015-02-21 20:51 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-03-24 19:57 - 2015-02-21 20:51 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2015-03-24 19:57 - 2015-02-21 20:51 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2015-03-24 19:57 - 2015-02-21 20:50 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-03-24 19:57 - 2015-02-21 20:50 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-03-24 19:57 - 2015-02-21 20:50 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-03-24 19:57 - 2015-02-21 20:50 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2015-03-24 19:57 - 2015-02-21 19:37 - 12375040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-03-24 19:57 - 2015-02-21 19:34 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-03-24 19:57 - 2015-02-21 19:29 - 09747968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-03-24 19:57 - 2015-02-21 19:28 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-03-24 19:57 - 2015-02-21 19:22 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-03-24 19:57 - 2015-02-21 19:21 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-03-24 19:57 - 2015-02-21 19:21 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-03-24 19:57 - 2015-02-21 19:20 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2015-03-24 19:57 - 2015-02-21 19:20 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-03-24 19:57 - 2015-02-21 19:19 - 01803264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-03-24 19:57 - 2015-02-21 19:19 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-03-24 19:57 - 2015-02-21 19:19 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-03-24 19:57 - 2015-02-21 19:19 - 00421376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-03-24 19:57 - 2015-02-21 19:19 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-03-24 19:57 - 2015-02-21 19:18 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-03-24 19:57 - 2015-02-21 19:18 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-03-24 19:57 - 2015-02-21 19:18 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-03-24 19:57 - 2015-02-21 19:18 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-03-24 19:57 - 2015-02-21 19:18 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2015-03-24 19:57 - 2015-02-21 19:18 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2015-03-24 19:57 - 2015-02-21 19:18 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2015-03-24 19:57 - 2015-02-21 19:17 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-03-24 19:57 - 2014-06-14 02:56 - 00901568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2015-03-24 19:57 - 2014-06-14 02:51 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll

2015-03-24 19:56 - 2014-06-06 10:59 - 00506880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2015-03-24 19:56 - 2014-06-06 09:13 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2015-03-24 19:56 - 2014-06-02 23:30 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll

2015-03-24 19:56 - 2014-06-02 23:29 - 02280448 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2015-03-24 19:56 - 2014-06-02 23:29 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2015-03-24 19:56 - 2014-06-02 22:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2015-03-24 19:56 - 2014-06-02 12:31 - 00332800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll

2015-03-24 19:56 - 2014-06-02 12:30 - 01993728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2015-03-24 19:56 - 2014-05-30 09:10 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2015-03-24 19:33 - 2015-03-24 19:33 - 00000000 ____D () C:\Users\Ingrid Keim\AppData\Roaming\AVAST Software

2015-03-24 19:20 - 2015-03-24 19:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software

2015-03-24 19:19 - 2015-03-29 10:18 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update

2015-03-24 19:18 - 2015-03-24 19:18 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys

2015-03-24 19:18 - 2015-03-24 19:18 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys

2015-03-24 19:18 - 2015-03-24 19:18 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe

2015-03-24 19:18 - 2015-03-24 19:18 - 00331464 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswNdis2.sys

2015-03-24 19:18 - 2015-03-24 19:18 - 00271200 _____ () C:\Windows\system32\Drivers\aswVmm.sys

2015-03-24 19:18 - 2015-03-24 19:18 - 00088408 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys

2015-03-24 19:18 - 2015-03-24 19:18 - 00065736 _____ () C:\Windows\system32\Drivers\aswRvrt.sys

2015-03-24 19:18 - 2015-03-24 19:18 - 00065224 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswTdi.sys

2015-03-24 19:18 - 2015-03-24 19:18 - 00064712 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr.sys

2015-03-24 19:18 - 2015-03-24 19:18 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr

2015-03-24 19:18 - 2015-03-24 19:18 - 00029168 _____ () C:\Windows\system32\Drivers\aswHwid.sys

2015-03-24 19:18 - 2015-03-24 19:18 - 00028144 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswKbd.sys

2015-03-24 19:18 - 2015-03-24 19:18 - 00012368 _____ (ALWIL Software) C:\Windows\system32\Drivers\aswNdis.sys

2015-03-24 19:15 - 2015-03-24 19:15 - 00000000 ____D () C:\Program Files\AVAST Software

2015-03-24 19:14 - 2015-03-24 19:14 - 05453024 _____ (Avast Software s.r.o.) C:\Users\Ingrid Keim\Downloads\avast_premier_antivirus_setup_online.exe

2015-03-24 19:14 - 2015-03-24 19:14 - 00000000 ____D () C:\ProgramData\AVAST Software

2015-03-24 19:12 - 2015-03-24 19:12 - 07709864 _____ (McAfee, Inc.) C:\Users\Ingrid Keim\Downloads\Setup_serial_EuzO071l5E56nYjTuLzYOw2_key.exe

2015-03-24 19:08 - 2015-03-24 19:08 - 05315120 _____ (McAfee, Inc.) C:\Users\Ingrid Keim\Downloads\Setup_serial_sBpPxkZHpiFZsbQi36ZJeQ2_key.exe

2015-03-24 18:59 - 2015-03-24 19:05 - 00000000 ____D () C:\Program Files (x86)\SafeKey

2015-03-24 18:43 - 2015-03-25 11:46 - 00000000 ____D () C:\Program Files\Common Files\McAfee

2015-03-24 18:42 - 2015-03-24 18:59 - 26064960 _____ (McAfee, Inc.) C:\Users\Ingrid Keim\Downloads\Setup_serial_j9OgRELm4KqYxWZmBX5ckQ2_key.exe
 

==================== One Month Modified Files and Folders =======
 

(If an entry is included in the fixlist, the file\folder will be moved.)
 

2015-03-29 13:08 - 2009-08-01 16:46 - 01963182 _____ () C:\Windows\WindowsUpdate.log

2015-03-29 12:46 - 2013-04-23 20:09 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-03-29 12:17 - 2006-11-02 17:22 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2015-03-29 12:17 - 2006-11-02 17:22 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2015-03-29 10:28 - 2008-01-21 13:10 - 01566772 _____ () C:\Windows\system32\PerfStringBackup.INI

2015-03-29 10:28 - 2008-01-21 13:09 - 00674098 _____ () C:\Windows\system32\perfh007.dat

2015-03-29 10:28 - 2008-01-21 13:09 - 00146078 _____ () C:\Windows\system32\perfc007.dat

2015-03-29 10:18 - 2014-06-20 11:33 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics

2015-03-29 10:17 - 2006-11-02 17:42 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2015-03-28 15:52 - 2009-08-16 18:34 - 00000012 _____ () C:\Windows\bthservsdp.dat

2015-03-28 15:52 - 2006-11-02 17:42 - 00032510 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2015-03-28 15:27 - 2013-11-17 12:00 - 00289116 _____ () C:\Windows\PFRO.log

2015-03-28 15:14 - 2010-05-14 19:30 - 00000000 ____D () C:\ProgramData\ICQ

2015-03-28 15:14 - 2006-11-02 15:34 - 00000000 ____D () C:\Windows\tracing

2015-03-28 10:25 - 2006-11-02 15:33 - 00000000 ____D () C:\Windows\rescache

2015-03-28 09:50 - 2006-11-02 15:33 - 00000000 __RHD () C:\Users\Default

2015-03-28 09:45 - 2006-11-02 14:34 - 00000215 _____ () C:\Windows\system.ini

2015-03-28 08:44 - 2013-11-17 12:04 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2015-03-27 11:27 - 2009-06-05 17:32 - 00000000 ____D () C:\ProgramData\Microsoft Help

2015-03-27 09:40 - 2013-06-26 16:27 - 00000000 ____D () C:\Program Files (x86)\7-Zip

2015-03-27 09:40 - 2010-05-13 17:25 - 00000000 ____D () C:\Program Files (x86)\DivX

2015-03-27 09:40 - 2010-05-13 17:23 - 00000000 ____D () C:\ProgramData\DivX

2015-03-27 09:39 - 2010-05-13 17:27 - 00000000 ____D () C:\Users\Ingrid Keim\AppData\Roaming\DivX

2015-03-27 09:39 - 2010-05-13 17:27 - 00000000 ____D () C:\Program Files\DivX

2015-03-27 09:39 - 2009-08-02 16:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX

2015-03-27 09:38 - 2010-08-22 20:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

2015-03-27 09:37 - 2013-04-23 20:09 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-03-27 09:37 - 2013-04-23 20:09 - 00003736 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-03-27 09:37 - 2013-03-18 20:31 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-03-27 09:26 - 2014-02-28 18:08 - 00003266 _____ () C:\Windows\setupact.log

2015-03-25 11:50 - 2006-11-02 17:21 - 00344648 _____ () C:\Windows\system32\FNTCACHE.DAT

2015-03-25 11:47 - 2006-11-02 17:07 - 00000000 ____D () C:\Program Files\Windows Journal

2015-03-24 21:16 - 2014-02-28 16:15 - 01543164 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI

2015-03-24 20:57 - 2013-08-14 20:05 - 00000000 ____D () C:\Windows\system32\MRT

2015-03-24 20:48 - 2010-08-20 17:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2015-03-24 20:48 - 2010-08-20 17:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight

2015-03-24 19:19 - 2009-08-02 14:07 - 00000000 ____D () C:\Users\Ingrid Keim

2015-03-24 18:45 - 2013-08-28 19:53 - 00000000 ____D () C:\ProgramData\Avira

2015-03-24 18:43 - 2009-06-05 17:19 - 00000000 ____D () C:\ProgramData\McAfee
 

==================== Files in the root of some directories =======
 

2013-08-15 21:29 - 2013-08-15 21:29 - 0000732 _____ () C:\Users\Ingrid Keim\AppData\Local\d3d9caps64.dat

2013-10-22 15:47 - 2014-03-27 21:18 - 0008192 _____ () C:\Users\Ingrid Keim\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2010-05-13 17:26 - 2010-05-13 17:26 - 0424868 _____ () C:\Users\Ingrid Keim\AppData\Local\dd_vcredistMSI21C6.txt

2010-05-13 17:26 - 2010-05-13 17:26 - 0011722 _____ () C:\Users\Ingrid Keim\AppData\Local\dd_vcredistUI21C6.txt

2013-12-10 21:40 - 2013-12-10 21:40 - 0014702 _____ () C:\Users\Ingrid Keim\AppData\Local\dd_vcredistUI4BD4.txt

2013-06-26 16:25 - 2013-06-26 16:26 - 1077698 _____ () C:\Users\Ingrid Keim\AppData\Local\dd_vstor40_x64MSI627A.txt

2013-06-26 16:25 - 2013-06-26 16:26 - 0012510 _____ () C:\Users\Ingrid Keim\AppData\Local\dd_vstor40_x64UI627A.txt

2010-08-16 19:31 - 2010-08-20 17:42 - 0005409 _____ () C:\ProgramData\hpzinstall.log
 

Some content of TEMP:

====================

C:\Users\Ingrid Keim\AppData\Local\temp\Quarantine.exe

C:\Users\Ingrid Keim\AppData\Local\temp\sqlite3.dll
 
 

==================== Bamital & volsnap Check =================
 

(There is no automatic fix for files that do not pass verification.)
 

C:\Windows\System32\winlogon.exe => File is digitally signed

C:\Windows\System32\wininit.exe => File is digitally signed

C:\Windows\SysWOW64\wininit.exe => File is digitally signed

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\SysWOW64\explorer.exe => File is digitally signed

C:\Windows\System32\svchost.exe => File is digitally signed

C:\Windows\SysWOW64\svchost.exe => File is digitally signed

C:\Windows\System32\services.exe => File is digitally signed

C:\Windows\System32\User32.dll => File is digitally signed

C:\Windows\SysWOW64\User32.dll => File is digitally signed

C:\Windows\System32\userinit.exe => File is digitally signed

C:\Windows\SysWOW64\userinit.exe => File is digitally signed

C:\Windows\System32\rpcss.dll => File is digitally signed

C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
 
 

LastRegBack: 2015-03-29 10:25
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Hi,

also bis jetzt schaut es sehr gut aus :)
Vielen, vielen Dank dafür!

Grüße
Stephie

ps: Kann ich die ganzen Programme eigentlich wieder deinstallieren? :)

Machen wir jetzt. Adobe Reader updaten.

Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
http://deeprybka.trojaner-board.de/b.../combofix2.pngCombofix deinstallieren .

Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
Drücke bitte die http://deeprybka.trojaner-board.de/b...ne/revo/w7.png + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
Klicke auf OK.
Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.

Schließe alle offenen Programme.
Starte die delfix.exe mit einem Doppelklick.
Setze vor jede Funktion ein Häkchen.
Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...:dankeschoen:und/oder das Forum mit einer kleinen Spende http://www.trojaner-board.de/extra/spende.png unterstützen. :applaus:

http://deeprybka.trojaner-board.de/b...ast/schild.pngAbsicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank.
Meine Empfehlung:
http://filepony.de/icon/emsisoft_anti_malware.png
Emsisoft

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:
http://filepony.de/icon/noscript.png NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
http://filepony.de/icon/malwarebytes_anti_exploit.pngMalwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.

Lade Software von einem sauberen Portal wie http://filepony.de/images/microbanner.gif.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwarecleaner .

Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.