Hey Leute,
ich habe meine externe Festplatte mit dem Virenscanner Avast Free Antivirus scannen lassen, nachdem ich beim entfernen meiner Festplatte Daten verloren habe und ein Paar Daten beschädigt wurden. Zum Beispiel habe ich ein Video, welches sonst gut lief vor kurzem nochmal öffen wollen und auf einmal findet mein GOMPlayer keine codecs dafür. VLC Player kann das Video auch nicht öffnen.

Der Virenscanner hat auch etwas gefunden
Ich hänge das Resultat als JPG File dran


Mein Virenscanner ist auf Spanisch aber am BIld könnt ihr ja erkennen, um welche Datei es sich handelt. Habe erst auf Repieren geklickt, dies war aber nicht möglich.

Was ratet ihr mir? Ist da eine Verbindung mit den Datenverlusten und dem Fund?

LG
Juan Carlos

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Vielen Dank für deine schnelle Antwort!

FRST.txt:



FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 05-09-2013
Ran by Aleman (administrator) on ALEMAN-PC on 05-09-2013 15:24:35
Running from C:\Users\Aleman\Downloads
Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: Spanish Modern Sort
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files\Orangenet\WTGService.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(TODO: <Company name>) C:\Program Files\Orangenet\Launcher.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
(SRWare) C:\Program Files\SRWare Iron\iron.exe
(SRWare) C:\Program Files\SRWare Iron\iron.exe
(SRWare) C:\Program Files\SRWare Iron\iron.exe
(SRWare) C:\Program Files\SRWare Iron\iron.exe
(SRWare) C:\Program Files\SRWare Iron\iron.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [QlbCtrl.exe] - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [287800 2009-11-11] ( Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKCU\...\Run: [Wisdom-soft AutoScreenRecorder 3.1 Pro] - 0 [x]
MountPoints2: {090539d2-cd44-11e2-a044-0013cedd35bb} - E:\.\Setup.exe AUTORUN=1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Launcher.lnk
ShortcutTarget: Launcher.lnk -> C:\Program Files\Orangenet\Launcher.exe (TODO: <Company name>)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://es.msn.com/?ocid=iehp
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 WTGService; C:\Program Files\Orangenet\WTGService.exe [312784 2010-04-20] ()

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [66336 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [61680 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-06-27] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-06-27] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [175176 2013-06-27] ()
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-13] (Microsoft Corporation)
R3 NETw2v32; C:\Windows\System32\DRIVERS\NETw2v32.sys [2595840 2007-03-06] (Intel® Corporation)
S3 ZTEusbMB; C:\Windows\System32\DRIVERS\ZTEusbnmeaext2.sys [105088 2013-06-04] (ZTE Incorporated)
S3 ZTEusbnet; C:\Windows\System32\DRIVERS\ZTEusbnet.sys [114688 2013-06-04] (ZTE Corporation)
S3 ZTEusbnmeaext; C:\Windows\System32\DRIVERS\ZTEusbnmeaext.sys [105088 2013-06-04] (ZTE Incorporated)
S3 ZTEWMSD_637; C:\Windows\System32\Drivers\ZTEWMSD_637.sys [15360 2013-06-04] (ZTE Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-05 15:21 - 2013-09-05 15:21 - 01080319 _____ (Farbar) C:\Users\Aleman\Downloads\FRST.exe
2013-09-04 09:57 - 2013-09-04 10:25 - 00000000 ____D C:\Users\Aleman\Desktop\Nueva carpeta
2013-09-04 08:31 - 2013-09-04 08:31 - 00000566 _____ C:\Windows\PFRO.log
2013-09-03 23:04 - 2013-09-03 23:04 - 00000000 ____D C:\Program Files\ESET
2013-09-03 23:03 - 2013-09-03 23:04 - 02347384 _____ (ESET) C:\Users\Aleman\Downloads\esetsmartinstaller_deu.exe
2013-09-03 22:51 - 2013-09-03 22:54 - 00000000 ____D C:\Users\Aleman\AppData\Roaming\vlc
2013-09-03 22:49 - 2013-09-03 22:56 - 00000000 ____D C:\Program Files\VideoLAN
2013-09-03 22:43 - 2013-09-03 22:48 - 23003252 _____ C:\Users\Aleman\Downloads\vlc-2.0.8_win32 (1).exe
2013-09-03 22:39 - 2013-09-03 22:42 - 17551900 _____ C:\Users\Aleman\Downloads\vlc-2.0.8_win32.exe
2013-09-03 22:33 - 2013-09-03 22:33 - 00923791 _____ C:\Users\Aleman\Downloads\DivFix++_v0.34-Win32.zip
2013-08-30 20:38 - 2013-08-30 20:41 - 00000000 ____D C:\Users\Aleman\Downloads\Real Social Dynamics (Tyler Durden) - The Blueprint Decoded DVDs
2013-08-30 20:25 - 2013-08-30 20:44 - 00000000 ____D C:\Users\Aleman\AppData\Local\Torch
2013-08-30 20:23 - 2013-08-30 20:24 - 01736456 _____ (Torch Media Inc.) C:\Users\Aleman\Downloads\TorchSetup.exe
2013-08-30 19:56 - 2013-08-31 16:41 - 00000551 _____ C:\Users\Aleman\Desktop\robi michel.txt
2013-08-28 14:02 - 2013-08-30 17:53 - 00000000 ____D C:\Users\Aleman\AppData\Local\CrashDumps
2013-08-27 14:25 - 2013-08-28 15:38 - 00003584 _____ C:\Users\Aleman\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-08-27 14:23 - 2013-08-27 14:23 - 00000000 ____D C:\Users\Aleman\AppData\Roaming\TechSmith
2013-08-27 14:23 - 2013-08-27 14:23 - 00000000 ____D C:\Users\Aleman\AppData\Local\TechSmith
2013-08-27 14:22 - 2013-08-27 14:22 - 00000000 ____D C:\Users\Aleman\Documents\Camtasia Studio
2013-08-27 14:19 - 2013-08-27 14:19 - 00001126 _____ C:\Users\Public\Desktop\Camtasia Studio 8.lnk
2013-08-27 14:19 - 2013-08-27 14:19 - 00000000 ____D C:\Program Files\QuickTime
2013-08-27 14:18 - 2013-08-27 14:18 - 00000000 ____D C:\ProgramData\TechSmith
2013-08-27 14:18 - 2013-08-27 14:18 - 00000000 ____D C:\Program Files\TechSmith
2013-08-27 14:18 - 2013-08-27 14:18 - 00000000 ____D C:\Program Files\Common Files\TechSmith Shared
2013-08-27 00:17 - 2013-09-03 19:42 - 00000000 ____D C:\Program Files\Convar
2013-08-27 00:14 - 2013-08-27 00:17 - 03462033 _____ C:\Users\Aleman\Downloads\pci_4filerecovery.exe
2013-08-27 00:02 - 2013-08-27 14:35 - 00000000 ____D C:\Program Files\Recuva
2013-08-26 23:56 - 2013-08-27 00:01 - 03843072 _____ (Piriform Ltd) C:\Users\Aleman\Downloads\rcsetup148.exe
2013-08-26 16:06 - 2013-08-26 16:11 - 05401856 _____ C:\Users\Aleman\Downloads\HC228SetDE.exe
2013-08-26 14:44 - 2013-08-26 14:48 - 04215463 _____ C:\Users\Aleman\Downloads\setupautoscreenrecorder31375.exe
2013-08-14 23:26 - 2013-08-14 23:30 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 23:17 - 2013-07-25 23:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-14 23:17 - 2013-07-25 23:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-14 23:17 - 2013-07-25 23:13 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-14 23:17 - 2013-07-25 23:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-14 23:17 - 2013-07-25 23:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-14 23:17 - 2013-07-25 23:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-14 23:17 - 2013-07-25 23:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-14 23:17 - 2013-07-25 23:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-14 23:17 - 2013-07-25 23:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-14 23:17 - 2013-07-25 23:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-14 23:17 - 2013-07-25 23:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-14 23:17 - 2013-07-25 23:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-14 23:17 - 2013-07-25 23:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-14 23:17 - 2013-07-25 23:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-14 23:17 - 2013-07-25 22:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-14 23:17 - 2013-07-25 21:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-14 21:49 - 2013-08-14 23:11 - 126371493 _____ C:\Users\Aleman\Downloads\Carlos Vives - Corazon Profundo (2013).zip
2013-08-14 20:47 - 2013-07-09 01:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-08-14 20:47 - 2013-07-09 01:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 20:47 - 2013-07-09 00:53 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 20:47 - 2013-07-09 00:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 20:47 - 2013-07-09 00:50 - 00652800 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 20:47 - 2013-07-09 00:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 20:47 - 2013-07-09 00:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 20:47 - 2013-07-09 00:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-14 20:43 - 2013-07-25 04:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-14 20:43 - 2013-07-06 01:05 - 01293760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 20:39 - 2013-07-18 21:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 20:39 - 2013-06-14 23:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-08 14:31 - 2013-09-05 15:14 - 00008640 _____ C:\Windows\setupact.log
2013-08-08 14:31 - 2013-08-08 14:31 - 00000000 _____ C:\Windows\setuperr.log
2013-08-08 08:38 - 2013-08-08 08:38 - 00000000 ____D C:\Program Files\CCleaner
2013-08-08 08:36 - 2013-08-08 08:37 - 03395840 _____ (Piriform Ltd) C:\Users\Aleman\Downloads\ccsetup404_slim.exe

==================== One Month Modified Files and Folders =======

2013-09-05 15:23 - 2013-09-05 15:23 - 00000000 ____D C:\FRST
2013-09-05 15:23 - 2013-06-01 12:04 - 01878121 _____ C:\Windows\WindowsUpdate.log
2013-09-05 15:22 - 2009-07-14 00:34 - 00014592 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-05 15:22 - 2009-07-14 00:34 - 00014592 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-05 15:21 - 2013-09-05 15:21 - 01080319 _____ (Farbar) C:\Users\Aleman\Downloads\FRST.exe
2013-09-05 15:14 - 2013-08-08 14:31 - 00008640 _____ C:\Windows\setupact.log
2013-09-05 15:14 - 2009-07-14 00:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-05 13:13 - 2013-06-04 14:55 - 00000838 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-05 11:26 - 2013-06-02 09:46 - 01670586 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-05 10:53 - 2013-07-05 20:47 - 00001209 _____ C:\Users\Aleman\Documents\VideoCacheView.cfg
2013-09-04 11:34 - 2013-07-04 16:11 - 00000372 _____ C:\Users\Aleman\Desktop\To Do List.txt
2013-09-04 10:25 - 2013-09-04 09:57 - 00000000 ____D C:\Users\Aleman\Desktop\Nueva carpeta
2013-09-04 08:31 - 2013-09-04 08:31 - 00000566 _____ C:\Windows\PFRO.log
2013-09-03 23:04 - 2013-09-03 23:04 - 00000000 ____D C:\Program Files\ESET
2013-09-03 23:04 - 2013-09-03 23:03 - 02347384 _____ (ESET) C:\Users\Aleman\Downloads\esetsmartinstaller_deu.exe
2013-09-03 22:56 - 2013-09-03 22:49 - 00000000 ____D C:\Program Files\VideoLAN
2013-09-03 22:54 - 2013-09-03 22:51 - 00000000 ____D C:\Users\Aleman\AppData\Roaming\vlc
2013-09-03 22:48 - 2013-09-03 22:43 - 23003252 _____ C:\Users\Aleman\Downloads\vlc-2.0.8_win32 (1).exe
2013-09-03 22:42 - 2013-09-03 22:39 - 17551900 _____ C:\Users\Aleman\Downloads\vlc-2.0.8_win32.exe
2013-09-03 22:33 - 2013-09-03 22:33 - 00923791 _____ C:\Users\Aleman\Downloads\DivFix++_v0.34-Win32.zip
2013-09-03 19:42 - 2013-08-27 00:17 - 00000000 ____D C:\Program Files\Convar
2013-08-31 16:41 - 2013-08-30 19:56 - 00000551 _____ C:\Users\Aleman\Desktop\robi michel.txt
2013-08-30 22:17 - 2013-06-16 15:41 - 00000000 ____D C:\Users\Aleman\AppData\Roaming\Skype
2013-08-30 20:44 - 2013-08-30 20:25 - 00000000 ____D C:\Users\Aleman\AppData\Local\Torch
2013-08-30 20:41 - 2013-08-30 20:38 - 00000000 ____D C:\Users\Aleman\Downloads\Real Social Dynamics (Tyler Durden) - The Blueprint Decoded DVDs
2013-08-30 20:24 - 2013-08-30 20:23 - 01736456 _____ (Torch Media Inc.) C:\Users\Aleman\Downloads\TorchSetup.exe
2013-08-30 17:53 - 2013-08-28 14:02 - 00000000 ____D C:\Users\Aleman\AppData\Local\CrashDumps
2013-08-28 16:54 - 2013-06-04 09:01 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-28 15:38 - 2013-08-27 14:25 - 00003584 _____ C:\Users\Aleman\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-08-27 14:35 - 2013-08-27 00:02 - 00000000 ____D C:\Program Files\Recuva
2013-08-27 14:23 - 2013-08-27 14:23 - 00000000 ____D C:\Users\Aleman\AppData\Roaming\TechSmith
2013-08-27 14:23 - 2013-08-27 14:23 - 00000000 ____D C:\Users\Aleman\AppData\Local\TechSmith
2013-08-27 14:22 - 2013-08-27 14:22 - 00000000 ____D C:\Users\Aleman\Documents\Camtasia Studio
2013-08-27 14:21 - 2013-06-01 18:19 - 00000000 ____D C:\Users\Aleman
2013-08-27 14:19 - 2013-08-27 14:19 - 00001126 _____ C:\Users\Public\Desktop\Camtasia Studio 8.lnk
2013-08-27 14:19 - 2013-08-27 14:19 - 00000000 ____D C:\Program Files\QuickTime
2013-08-27 14:18 - 2013-08-27 14:18 - 00000000 ____D C:\ProgramData\TechSmith
2013-08-27 14:18 - 2013-08-27 14:18 - 00000000 ____D C:\Program Files\TechSmith
2013-08-27 14:18 - 2013-08-27 14:18 - 00000000 ____D C:\Program Files\Common Files\TechSmith Shared
2013-08-27 00:17 - 2013-08-27 00:14 - 03462033 _____ C:\Users\Aleman\Downloads\pci_4filerecovery.exe
2013-08-27 00:01 - 2013-08-26 23:56 - 03843072 _____ (Piriform Ltd) C:\Users\Aleman\Downloads\rcsetup148.exe
2013-08-26 16:11 - 2013-08-26 16:06 - 05401856 _____ C:\Users\Aleman\Downloads\HC228SetDE.exe
2013-08-26 14:48 - 2013-08-26 14:44 - 04215463 _____ C:\Users\Aleman\Downloads\setupautoscreenrecorder31375.exe
2013-08-25 20:27 - 2013-06-04 14:55 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-08-25 20:27 - 2013-06-04 14:55 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-08-19 08:21 - 2009-07-14 00:53 - 00032620 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-16 01:33 - 2009-07-13 22:37 - 00000000 ____D C:\Windows\rescache
2013-08-15 19:42 - 2009-07-13 22:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-08-15 08:25 - 2013-06-01 12:59 - 00000000 ____D C:\Windows\Panther
2013-08-14 23:30 - 2013-08-14 23:26 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 23:26 - 2013-06-06 11:57 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-14 23:11 - 2013-08-14 21:49 - 126371493 _____ C:\Users\Aleman\Downloads\Carlos Vives - Corazon Profundo (2013).zip
2013-08-10 21:36 - 2013-07-22 09:38 - 00000442 _____ C:\Users\Aleman\Desktop\Autosuggestion.txt
2013-08-09 11:52 - 2013-07-25 19:07 - 00000000 ____D C:\Users\Aleman\Desktop\Motivation
2013-08-08 14:31 - 2013-08-08 14:31 - 00000000 _____ C:\Windows\setuperr.log
2013-08-08 10:00 - 2013-06-04 15:10 - 00000000 ____D C:\Users\Aleman\AppData\Roaming\Winamp
2013-08-08 08:41 - 2013-06-12 21:24 - 00000000 ____D C:\Windows\Minidump
2013-08-08 08:41 - 2013-06-05 19:02 - 00000000 ____D C:\Program Files\PDFCreator
2013-08-08 08:38 - 2013-08-08 08:38 - 00000000 ____D C:\Program Files\CCleaner
2013-08-08 08:37 - 2013-08-08 08:36 - 03395840 _____ (Piriform Ltd) C:\Users\Aleman\Downloads\ccsetup404_slim.exe
2013-08-06 10:01 - 2013-07-05 23:52 - 00000000 ____D C:\Program Files\Internet Download Manager
2013-08-06 09:59 - 2013-07-05 23:52 - 00000000 ____D C:\Users\Aleman\AppData\Roaming\DMCache

Files to move or delete:
====================
C:\Users\Aleman\AppData\Local\Temp\Foxit Updater.exe
C:\Users\Aleman\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Aleman\AppData\Local\Temp\WLZ89DB.tmp\CddbLangDE.dll
C:\Users\Aleman\AppData\Local\Temp\Rar$EXa0.757\DivFix++_v0.34\DivFix++.exe
C:\Users\Aleman\AppData\Local\Temp\Camtasia_Setup\Prerequisites\DotNetFX40Client\dotNetFx40_Client_setup.exe

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-01 15:00

==================== End Of Log ============================
         

--- --- ---

--- --- ---


Addition.txt:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 05-09-2013
Ran by Aleman at 2013-09-05 15:25:54
Running from C:\Users\Aleman\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

Adobe Flash Player 11 Plugin (Version: 11.8.800.94)
avast! Free Antivirus (Version: 8.0.1489.0)
Camtasia Studio 8 (Version: 8.0.4.1060)
CCleaner (Version: 4.04)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
ESET Online Scanner v3
Foxit Reader (Version: 5.4.5.124)
GOM Player (Version: 2.1.49.5139)
Guitar Pro 5.2
HP Quick Launch Buttons (Version: 6.50.14.1)
KaloMa 4.77
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile ESN Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended ESN Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Office 2010 Service Pack 1 (SP1)
Microsoft Office Access MUI (Spanish) 2010 (Version: 14.0.6029.1000)
Microsoft Office Excel MUI (Spanish) 2010 (Version: 14.0.6029.1000)
Microsoft Office Groove MUI (Spanish) 2010 (Version: 14.0.6029.1000)
Microsoft Office InfoPath MUI (Spanish) 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (Spanish) 2010 (Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (Spanish) 2010 (Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (Spanish) 2010 (Version: 14.0.6029.1000)
Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (Basque) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (Catalan) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (Galician) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (Portuguese (Brazil)) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proof (Spanish) 2010 (Version: 14.0.6029.1000)
Microsoft Office Proofing (Spanish) 2010 (Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (Spanish) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (Spanish) 2010 (Version: 14.0.6029.1000)
Microsoft Office Word MUI (Spanish) 2010 (Version: 14.0.6029.1000)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Orange net (Version: 1.0)
Paquete de idioma de Microsoft .NET Framework 4 Client Profile ESN (Version: 4.0.30319)
Paquete de idioma de Microsoft .NET Framework 4 Extended ESN (Version: 4.0.30319)
PDFCreator (Version: 1.7.0)
QLBCASL (Version: 6.40.17.2)
Skype™ 6.5 (Version: 6.5.158)
SRWare Iron Version SRWare Iron 27.0.1500.0 (Version: SRWare Iron 27.0.1500.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1)
Update for Microsoft Office 2010 (KB2553065)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition
Update for Microsoft Office 2010 (KB2566458)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition
Winamp (Version: 5.63 )
WinRAR 4.20 (32-Bit) (Version: 4.20.0)
 

==================== Restore Points  =========================

05-09-2013 01:35:02 Punto de control programado

==================== Hosts content: ==========================

2009-07-13 22:04 - 2009-06-10 17:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {08CB0E9B-8A3F-4C32-B66E-5327AA3B2744} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-25] (Adobe Systems Incorporated)
Task: {0D9B5D92-3A22-486D-A887-3AA21597CF27} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started
Task: {32E8DF32-1E8B-416A-BAF7-10FC533426E7} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {3A32529C-6E19-4035-9B1D-6D3F49A96E82} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-07-22] (Piriform Ltd)
Task: {62B2E81A-6E87-467E-BCCA-4EC24E2757D0} - System32\Tasks\{A77290C2-B40C-416B-9DCF-EA2D823BD2FC} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.5.0.158/de/abandoninstall?source=lightinstaller&page=tsInstall
Task: {91E6F565-C2AB-47B0-BBE8-B8C99F0D3915} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {FE478568-2E3D-47BF-AEFB-CF699ADDBD1F} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-13] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2011-03-17 00:11 - 2011-03-17 00:11 - 04297568 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2013-06-02 09:58 - 2010-01-12 13:56 - 00363064 _____ (Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBSERVICE.DLL
2013-06-02 10:46 - 2012-10-16 03:39 - 00561664 _____ (Microsoft Corporation) C:\Windows\AppPatch\AcLayers.DLL
2013-06-04 14:33 - 2013-05-25 16:36 - 55498240 _____ (SRWare) C:\Program Files\SRWare Iron\iron.dll
2013-06-04 14:33 - 2013-05-22 17:26 - 09956864 _____ (The ICU Project) C:\Program Files\SRWare Iron\icudt.dll
2013-06-04 14:33 - 2013-04-10 01:39 - 00970240 _____ () C:\Program Files\SRWare Iron\ffmpegsumo.dll
2013-08-25 20:27 - 2013-08-25 20:27 - 16166280 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll

==================== Alternate Data Streams (whitelisted) ==========


==================== Faulty Device Manager Devices =============

Name: Controladora de dispositivo de almacenamiento
Description: Controladora de dispositivo de almacenamiento
Class Guid: 
Manufacturer: 
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Controladora de vídeo
Description: Controladora de vídeo
Class Guid: 
Manufacturer: 
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Controladora simple de comunicaciones PCI
Description: Controladora simple de comunicaciones PCI
Class Guid: 
Manufacturer: 
Service: 
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/30/2013 05:52:56 PM) (Source: Application Error) (User: )
Description: Nombre de la aplicación con errores: iron.exe, versión: 27.0.1500.0, marca de tiempo: 0x51a0cc89
Nombre del módulo con errores: ole32.dll, versión: 6.1.7601.17514, marca de tiempo: 0x4ce7b96f
Código de excepción: 0xc0000005
Desplazamiento de errores: 0x0003bc21
Id. del proceso con errores: 0xea4
Hora de inicio de la aplicación con errores: 0xiron.exe0
Ruta de acceso de la aplicación con errores: iron.exe1
Ruta de acceso del módulo con errores: iron.exe2
Id. del informe: iron.exe3

Error: (08/28/2013 03:29:19 PM) (Source: Application Error) (User: )
Description: Nombre de la aplicación con errores: iron.exe, versión: 27.0.1500.0, marca de tiempo: 0x51a0cc89
Nombre del módulo con errores: NPSWF32_11_8_800_94.dll, versión: 11.8.800.94, marca de tiempo: 0x51c4d986
Código de excepción: 0xc0000005
Desplazamiento de errores: 0x007bb94e
Id. del proceso con errores: 0xe10
Hora de inicio de la aplicación con errores: 0xiron.exe0
Ruta de acceso de la aplicación con errores: iron.exe1
Ruta de acceso del módulo con errores: iron.exe2
Id. del informe: iron.exe3

Error: (08/28/2013 03:28:16 PM) (Source: Application Error) (User: )
Description: Nombre de la aplicación con errores: iron.exe, versión: 27.0.1500.0, marca de tiempo: 0x51a0cc89
Nombre del módulo con errores: NPSWF32_11_8_800_94.dll, versión: 11.8.800.94, marca de tiempo: 0x51c4d986
Código de excepción: 0xc0000417
Desplazamiento de errores: 0x007b02cc
Id. del proceso con errores: 0x6a0
Hora de inicio de la aplicación con errores: 0xiron.exe0
Ruta de acceso de la aplicación con errores: iron.exe1
Ruta de acceso del módulo con errores: iron.exe2
Id. del informe: iron.exe3

Error: (08/28/2013 03:22:12 PM) (Source: Application Error) (User: )
Description: Nombre de la aplicación con errores: iron.exe, versión: 27.0.1500.0, marca de tiempo: 0x51a0cc89
Nombre del módulo con errores: NPSWF32_11_8_800_94.dll, versión: 11.8.800.94, marca de tiempo: 0x51c4d986
Código de excepción: 0xc0000005
Desplazamiento de errores: 0x007bb94e
Id. del proceso con errores: 0xc70
Hora de inicio de la aplicación con errores: 0xiron.exe0
Ruta de acceso de la aplicación con errores: iron.exe1
Ruta de acceso del módulo con errores: iron.exe2
Id. del informe: iron.exe3

Error: (08/28/2013 03:21:59 PM) (Source: Application Error) (User: )
Description: Nombre de la aplicación con errores: iron.exe, versión: 27.0.1500.0, marca de tiempo: 0x51a0cc89
Nombre del módulo con errores: NPSWF32_11_8_800_94.dll, versión: 11.8.800.94, marca de tiempo: 0x51c4d986
Código de excepción: 0xc0000005
Desplazamiento de errores: 0x007bb94e
Id. del proceso con errores: 0xc34
Hora de inicio de la aplicación con errores: 0xiron.exe0
Ruta de acceso de la aplicación con errores: iron.exe1
Ruta de acceso del módulo con errores: iron.exe2
Id. del informe: iron.exe3

Error: (08/28/2013 03:21:21 PM) (Source: Application Error) (User: )
Description: Nombre de la aplicación con errores: iron.exe, versión: 27.0.1500.0, marca de tiempo: 0x51a0cc89
Nombre del módulo con errores: NPSWF32_11_8_800_94.dll, versión: 11.8.800.94, marca de tiempo: 0x51c4d986
Código de excepción: 0xc0000005
Desplazamiento de errores: 0x007bb94e
Id. del proceso con errores: 0xc28
Hora de inicio de la aplicación con errores: 0xiron.exe0
Ruta de acceso de la aplicación con errores: iron.exe1
Ruta de acceso del módulo con errores: iron.exe2
Id. del informe: iron.exe3

Error: (08/28/2013 03:18:16 PM) (Source: Application Error) (User: )
Description: Nombre de la aplicación con errores: iron.exe, versión: 27.0.1500.0, marca de tiempo: 0x51a0cc89
Nombre del módulo con errores: NPSWF32_11_8_800_94.dll, versión: 11.8.800.94, marca de tiempo: 0x51c4d986
Código de excepción: 0xc0000005
Desplazamiento de errores: 0x007bb94e
Id. del proceso con errores: 0x790
Hora de inicio de la aplicación con errores: 0xiron.exe0
Ruta de acceso de la aplicación con errores: iron.exe1
Ruta de acceso del módulo con errores: iron.exe2
Id. del informe: iron.exe3

Error: (08/28/2013 03:16:26 PM) (Source: Application Error) (User: )
Description: Nombre de la aplicación con errores: iron.exe, versión: 27.0.1500.0, marca de tiempo: 0x51a0cc89
Nombre del módulo con errores: NPSWF32_11_8_800_94.dll, versión: 11.8.800.94, marca de tiempo: 0x51c4d986
Código de excepción: 0xc0000005
Desplazamiento de errores: 0x007bb94e
Id. del proceso con errores: 0xe70
Hora de inicio de la aplicación con errores: 0xiron.exe0
Ruta de acceso de la aplicación con errores: iron.exe1
Ruta de acceso del módulo con errores: iron.exe2
Id. del informe: iron.exe3

Error: (08/28/2013 03:15:26 PM) (Source: Application Error) (User: )
Description: Nombre de la aplicación con errores: iron.exe, versión: 27.0.1500.0, marca de tiempo: 0x51a0cc89
Nombre del módulo con errores: NPSWF32_11_8_800_94.dll, versión: 11.8.800.94, marca de tiempo: 0x51c4d986
Código de excepción: 0xc0000417
Desplazamiento de errores: 0x007b02cc
Id. del proceso con errores: 0x9c4
Hora de inicio de la aplicación con errores: 0xiron.exe0
Ruta de acceso de la aplicación con errores: iron.exe1
Ruta de acceso del módulo con errores: iron.exe2
Id. del informe: iron.exe3

Error: (08/28/2013 03:13:14 PM) (Source: Application Error) (User: )
Description: Nombre de la aplicación con errores: iron.exe, versión: 27.0.1500.0, marca de tiempo: 0x51a0cc89
Nombre del módulo con errores: NPSWF32_11_8_800_94.dll, versión: 11.8.800.94, marca de tiempo: 0x51c4d986
Código de excepción: 0xc0000005
Desplazamiento de errores: 0x007bb94e
Id. del proceso con errores: 0xfc0
Hora de inicio de la aplicación con errores: 0xiron.exe0
Ruta de acceso de la aplicación con errores: iron.exe1
Ruta de acceso del módulo con errores: iron.exe2
Id. del informe: iron.exe3


System errors:
=============
Error: (09/04/2013 04:11:20 PM) (Source: volsnap) (User: )
Description: Se anularon las instantáneas del volumen C: porque el almacenamiento de instantáneas no pudo crecer debido a un límite impuesto por el usuario.

Error: (09/04/2013 09:47:45 AM) (Source: Disk) (User: )
Description: El controlador detectó un error de controladora en \Device\Harddisk1\DR1.

Error: (09/04/2013 09:47:44 AM) (Source: Disk) (User: )
Description: El controlador detectó un error de controladora en \Device\Harddisk1\DR1.

Error: (09/04/2013 09:47:44 AM) (Source: Disk) (User: )
Description: El controlador detectó un error de controladora en \Device\Harddisk1\DR1.

Error: (09/04/2013 09:47:43 AM) (Source: Disk) (User: )
Description: El controlador detectó un error de controladora en \Device\Harddisk1\DR1.

Error: (09/03/2013 11:20:56 PM) (Source: Disk) (User: )
Description: El controlador detectó un error de controladora en \Device\Harddisk1\DR1.

Error: (09/03/2013 11:20:54 PM) (Source: volsnap) (User: )
Description: Se anularon las instantáneas del volumen C: porque el almacenamiento de instantáneas no pudo crecer debido a un límite impuesto por el usuario.

Error: (09/03/2013 10:08:31 PM) (Source: Disk) (User: )
Description: El controlador detectó un error de controladora en \Device\Harddisk1\DR1.

Error: (09/03/2013 09:42:02 PM) (Source: cdrom) (User: )
Description: El controlador detectó un error de controladora en \Device\CdRom0.

Error: (09/03/2013 09:42:02 PM) (Source: cdrom) (User: )
Description: El controlador detectó un error de controladora en \Device\CdRom0.


Microsoft Office Sessions:
=========================
Error: (08/30/2013 05:52:56 PM) (Source: Application Error)(User: )
Description: iron.exe27.0.1500.051a0cc89ole32.dll6.1.7601.175144ce7b96fc00000050003bc21ea401cea5cafd4d74c6C:\Program Files\SRWare Iron\iron.exeC:\Windows\system32\ole32.dll87008edf-11be-11e3-8b9d-001560b39d5b

Error: (08/28/2013 03:29:19 PM) (Source: Application Error)(User: )
Description: iron.exe27.0.1500.051a0cc89NPSWF32_11_8_800_94.dll11.8.800.9451c4d986c0000005007bb94ee1001cea424cd8f571aC:\Program Files\SRWare Iron\iron.exeC:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll220269b3-1018-11e3-ad60-001560b39d5b

Error: (08/28/2013 03:28:16 PM) (Source: Application Error)(User: )
Description: iron.exe27.0.1500.051a0cc89NPSWF32_11_8_800_94.dll11.8.800.9451c4d986c0000417007b02cc6a001cea423ef5d6f86C:\Program Files\SRWare Iron\iron.exeC:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dllfc0a3c87-1017-11e3-ad60-001560b39d5b

Error: (08/28/2013 03:22:12 PM) (Source: Application Error)(User: )
Description: iron.exe27.0.1500.051a0cc89NPSWF32_11_8_800_94.dll11.8.800.9451c4d986c0000005007bb94ec7001cea423e1e469b2C:\Program Files\SRWare Iron\iron.exeC:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll23a967a6-1017-11e3-ad60-001560b39d5b

Error: (08/28/2013 03:21:59 PM) (Source: Application Error)(User: )
Description: iron.exe27.0.1500.051a0cc89NPSWF32_11_8_800_94.dll11.8.800.9451c4d986c0000005007bb94ec3401cea423d27a6fb6C:\Program Files\SRWare Iron\iron.exeC:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll1b5d8ad8-1017-11e3-ad60-001560b39d5b

Error: (08/28/2013 03:21:21 PM) (Source: Application Error)(User: )
Description: iron.exe27.0.1500.051a0cc89NPSWF32_11_8_800_94.dll11.8.800.9451c4d986c0000005007bb94ec2801cea4236501ac6bC:\Program Files\SRWare Iron\iron.exeC:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll04b5903b-1017-11e3-ad60-001560b39d5b

Error: (08/28/2013 03:18:16 PM) (Source: Application Error)(User: )
Description: iron.exe27.0.1500.051a0cc89NPSWF32_11_8_800_94.dll11.8.800.9451c4d986c0000005007bb94e79001cea4231c9c348cC:\Program Files\SRWare Iron\iron.exeC:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll96ce882d-1016-11e3-ad60-001560b39d5b

Error: (08/28/2013 03:16:26 PM) (Source: Application Error)(User: )
Description: iron.exe27.0.1500.051a0cc89NPSWF32_11_8_800_94.dll11.8.800.9451c4d986c0000005007bb94ee7001cea422ff726cecC:\Program Files\SRWare Iron\iron.exeC:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll54ed3faa-1016-11e3-ad60-001560b39d5b

Error: (08/28/2013 03:15:26 PM) (Source: Application Error)(User: )
Description: iron.exe27.0.1500.051a0cc89NPSWF32_11_8_800_94.dll11.8.800.9451c4d986c0000417007b02cc9c401cea422b0ab7df0C:\Program Files\SRWare Iron\iron.exeC:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll318636a3-1016-11e3-ad60-001560b39d5b

Error: (08/28/2013 03:13:14 PM) (Source: Application Error)(User: )
Description: iron.exe27.0.1500.051a0cc89NPSWF32_11_8_800_94.dll11.8.800.9451c4d986c0000005007bb94efc001cea4220f346a75C:\Program Files\SRWare Iron\iron.exeC:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dlle27394fe-1015-11e3-ad60-001560b39d5b


==================== Memory info =========================== 

Percentage of memory in use: 44%
Total physical RAM: 2039.43 MB
Available physical RAM: 1134.15 MB
Total Pagefile: 4078.86 MB
Available Pagefile: 3114.84 MB
Total Virtual: 2047.88 MB
Available Virtual: 1903.49 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:37.16 GB) (Free:10.29 GB) NTFS
Drive f: (INTENSO) (Fixed) (Total:465.64 GB) (Free:193.86 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 37 GB) (Disk ID: 9DC96E9E)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=37 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 466 GB) (Disk ID: 716C4601)
Partition 1: (Not Active) - (Size=466 GB) - (Type=0C)

==================== End Of Log ============================
         

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

mbam:

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.09.06.05

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 10.0.9200.16660
Aleman :: ALEMAN-PC [Administrator]

06/09/2013 8:43:46
mbam-log-2013-09-06 (08-43-46).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|F:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 308225
Laufzeit: 1 Stunde(n), 38 Minute(n), 25 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 3
F:\System Volume Information\_restore{2768620F-BBBA-47FA-88F4-98E1BA02DE78}\RP9\A0000778.exe (Adware.WhenU) -> Erfolgreich gelöscht und in Quarantäne gestellt.
F:\System Volume Information\_restore{2768620F-BBBA-47FA-88F4-98E1BA02DE78}\RP9\A0000779.exe (Adware.WhenU) -> Erfolgreich gelöscht und in Quarantäne gestellt.
F:\Programme\iLividSetupV1.exe (PUP.Optional.Bandoo) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         

AdwCleaner:

# AdwCleaner v3.002 - Reporte Creado 06/09/2013 en 12:30:49
# Actualizado 01/09/2013 por Xplode
# Sistema Operativo : Windows 7 Professional Service Pack 1 (32 bits)
# Nombre de usuario : Aleman - ALEMAN-PC
# Ejecutado desde : C:\Users\Aleman\Downloads\adwcleaner.exe
# Opción : Limpiar

***** [ Servicios ] *****


***** [ Archivos / Carpetas ] *****


***** [ Accesos directos ] *****


***** [ Registro ] *****


***** [ Navegadores ] *****

-\\ Internet Explorer v10.0.9200.16660


*************************

AdwCleaner[R0].txt - [910 octets] - [06/09/2013 12:18:53]
AdwCleaner[R1].txt - [796 octets] - [06/09/2013 12:30:10]
AdwCleaner[S0].txt - [954 octets] - [06/09/2013 12:24:20]
AdwCleaner[S1].txt - [716 octets] - [06/09/2013 12:30:49]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [775 octets] ##########
         

JRT:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.5.8 (09.05.2013:1)
OS: Windows 7 Professional x86
Ran by Aleman on 06/09/2013 at 12:36:16,12
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\torch
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\torch



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Aleman\appdata\local\torch"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 06/09/2013 at 12:39:45,30
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

FRST:


FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 06-09-2013
Ran by Aleman (administrator) on ALEMAN-PC on 06-09-2013 12:44:58
Running from C:\Users\Aleman\Downloads
Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: Spanish Modern Sort
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files\Orangenet\WTGService.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(TODO: <Company name>) C:\Program Files\Orangenet\Launcher.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [QlbCtrl.exe] - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [287800 2009-11-11] ( Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKCU\...\Run: [Wisdom-soft AutoScreenRecorder 3.1 Pro] - 0 [x]
MountPoints2: {090539d2-cd44-11e2-a044-0013cedd35bb} - E:\.\Setup.exe AUTORUN=1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Launcher.lnk
ShortcutTarget: Launcher.lnk -> C:\Program Files\Orangenet\Launcher.exe (TODO: <Company name>)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://es.msn.com/?ocid=iehp
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKLM - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 WTGService; C:\Program Files\Orangenet\WTGService.exe [312784 2010-04-20] ()

==================== Drivers (Whitelisted) ====================

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [66336 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [61680 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-06-27] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-06-27] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [175176 2013-06-27] ()
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-13] (Microsoft Corporation)
R3 NETw2v32; C:\Windows\System32\DRIVERS\NETw2v32.sys [2595840 2007-03-06] (Intel® Corporation)
S3 ZTEusbMB; C:\Windows\System32\DRIVERS\ZTEusbnmeaext2.sys [105088 2013-06-04] (ZTE Incorporated)
S3 ZTEusbnet; C:\Windows\System32\DRIVERS\ZTEusbnet.sys [114688 2013-06-04] (ZTE Corporation)
S3 ZTEusbnmeaext; C:\Windows\System32\DRIVERS\ZTEusbnmeaext.sys [105088 2013-06-04] (ZTE Incorporated)
S3 ZTEWMSD_637; C:\Windows\System32\Drivers\ZTEWMSD_637.sys [15360 2013-06-04] (ZTE Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-06 12:39 - 2013-09-06 12:40 - 00000843 _____ C:\Users\Aleman\Desktop\JRT.txt
2013-09-06 12:36 - 2013-09-06 12:36 - 00000000 ____D C:\Windows\ERUNT
2013-09-06 12:33 - 2013-09-06 12:33 - 00000854 _____ C:\Users\Aleman\Desktop\AdwCleaner[S1].txt
2013-09-06 12:18 - 2013-09-06 12:30 - 00000000 ____D C:\AdwCleaner
2013-09-06 08:40 - 2013-09-06 08:41 - 01028823 _____ (Thisisu) C:\Users\Aleman\Downloads\JRT.exe
2013-09-06 08:40 - 2013-09-06 08:40 - 01037222 _____ C:\Users\Aleman\Downloads\adwcleaner.exe
2013-09-06 08:39 - 2013-09-06 08:39 - 00000000 ____D C:\Users\Aleman\AppData\Roaming\Malwarebytes
2013-09-06 08:38 - 2013-09-06 08:38 - 00001071 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-06 08:38 - 2013-09-06 08:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-06 08:38 - 2013-09-06 08:38 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-09-06 08:38 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-09-06 08:36 - 2013-09-06 08:38 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Aleman\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-05 15:25 - 2013-09-05 15:26 - 00020518 _____ C:\Users\Aleman\Downloads\Addition.txt
2013-09-05 15:23 - 2013-09-05 15:23 - 00000000 ____D C:\FRST
2013-09-04 09:57 - 2013-09-04 10:25 - 00000000 ____D C:\Users\Aleman\Desktop\Nueva carpeta
2013-09-04 08:31 - 2013-09-06 12:08 - 00001510 _____ C:\Windows\PFRO.log
2013-09-03 23:04 - 2013-09-03 23:04 - 00000000 ____D C:\Program Files\ESET
2013-09-03 23:03 - 2013-09-03 23:04 - 02347384 _____ (ESET) C:\Users\Aleman\Downloads\esetsmartinstaller_deu.exe
2013-09-03 22:51 - 2013-09-03 22:54 - 00000000 ____D C:\Users\Aleman\AppData\Roaming\vlc
2013-09-03 22:49 - 2013-09-03 22:56 - 00000000 ____D C:\Program Files\VideoLAN
2013-09-03 22:43 - 2013-09-03 22:48 - 23003252 _____ C:\Users\Aleman\Downloads\vlc-2.0.8_win32 (1).exe
2013-09-03 22:39 - 2013-09-03 22:42 - 17551900 _____ C:\Users\Aleman\Downloads\vlc-2.0.8_win32.exe
2013-09-03 22:33 - 2013-09-03 22:33 - 00923791 _____ C:\Users\Aleman\Downloads\DivFix++_v0.34-Win32.zip
2013-08-30 20:38 - 2013-08-30 20:41 - 00000000 ____D C:\Users\Aleman\Downloads\Real Social Dynamics (Tyler Durden) - The Blueprint Decoded DVDs
2013-08-30 20:23 - 2013-08-30 20:24 - 01736456 _____ (Torch Media Inc.) C:\Users\Aleman\Downloads\TorchSetup.exe
2013-08-30 19:56 - 2013-08-31 16:41 - 00000551 _____ C:\Users\Aleman\Desktop\robi michel.txt
2013-08-28 14:02 - 2013-08-30 17:53 - 00000000 ____D C:\Users\Aleman\AppData\Local\CrashDumps
2013-08-27 14:25 - 2013-08-28 15:38 - 00003584 _____ C:\Users\Aleman\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-08-27 14:23 - 2013-08-27 14:23 - 00000000 ____D C:\Users\Aleman\AppData\Roaming\TechSmith
2013-08-27 14:23 - 2013-08-27 14:23 - 00000000 ____D C:\Users\Aleman\AppData\Local\TechSmith
2013-08-27 14:22 - 2013-08-27 14:22 - 00000000 ____D C:\Users\Aleman\Documents\Camtasia Studio
2013-08-27 14:19 - 2013-08-27 14:19 - 00001126 _____ C:\Users\Public\Desktop\Camtasia Studio 8.lnk
2013-08-27 14:19 - 2013-08-27 14:19 - 00000000 ____D C:\Program Files\QuickTime
2013-08-27 14:18 - 2013-08-27 14:18 - 00000000 ____D C:\ProgramData\TechSmith
2013-08-27 14:18 - 2013-08-27 14:18 - 00000000 ____D C:\Program Files\TechSmith
2013-08-27 14:18 - 2013-08-27 14:18 - 00000000 ____D C:\Program Files\Common Files\TechSmith Shared
2013-08-27 00:17 - 2013-09-03 19:42 - 00000000 ____D C:\Program Files\Convar
2013-08-27 00:14 - 2013-08-27 00:17 - 03462033 _____ C:\Users\Aleman\Downloads\pci_4filerecovery.exe
2013-08-27 00:02 - 2013-08-27 14:35 - 00000000 ____D C:\Program Files\Recuva
2013-08-26 23:56 - 2013-08-27 00:01 - 03843072 _____ (Piriform Ltd) C:\Users\Aleman\Downloads\rcsetup148.exe
2013-08-26 16:06 - 2013-08-26 16:11 - 05401856 _____ C:\Users\Aleman\Downloads\HC228SetDE.exe
2013-08-26 14:44 - 2013-08-26 14:48 - 04215463 _____ C:\Users\Aleman\Downloads\setupautoscreenrecorder31375.exe
2013-08-14 23:26 - 2013-08-14 23:30 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 23:17 - 2013-07-25 23:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-14 23:17 - 2013-07-25 23:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-14 23:17 - 2013-07-25 23:13 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-14 23:17 - 2013-07-25 23:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-14 23:17 - 2013-07-25 23:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-14 23:17 - 2013-07-25 23:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-14 23:17 - 2013-07-25 23:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-14 23:17 - 2013-07-25 23:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-14 23:17 - 2013-07-25 23:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-14 23:17 - 2013-07-25 23:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-14 23:17 - 2013-07-25 23:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-14 23:17 - 2013-07-25 23:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-14 23:17 - 2013-07-25 23:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-14 23:17 - 2013-07-25 23:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-14 23:17 - 2013-07-25 22:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-14 23:17 - 2013-07-25 21:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-14 21:49 - 2013-08-14 23:11 - 126371493 _____ C:\Users\Aleman\Downloads\Carlos Vives - Corazon Profundo (2013).zip
2013-08-14 20:47 - 2013-07-09 01:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-08-14 20:47 - 2013-07-09 01:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 20:47 - 2013-07-09 00:53 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 20:47 - 2013-07-09 00:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 20:47 - 2013-07-09 00:50 - 00652800 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 20:47 - 2013-07-09 00:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 20:47 - 2013-07-09 00:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 20:47 - 2013-07-09 00:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-14 20:43 - 2013-07-25 04:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-14 20:43 - 2013-07-06 01:05 - 01293760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 20:39 - 2013-07-18 21:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 20:39 - 2013-06-14 23:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-08 14:31 - 2013-09-06 12:31 - 00009032 _____ C:\Windows\setupact.log
2013-08-08 14:31 - 2013-08-08 14:31 - 00000000 _____ C:\Windows\setuperr.log
2013-08-08 08:38 - 2013-08-08 08:38 - 00000000 ____D C:\Program Files\CCleaner
2013-08-08 08:36 - 2013-08-08 08:37 - 03395840 _____ (Piriform Ltd) C:\Users\Aleman\Downloads\ccsetup404_slim.exe

==================== One Month Modified Files and Folders =======

2013-09-06 12:44 - 2013-09-06 12:44 - 01081729 _____ (Farbar) C:\Users\Aleman\Downloads\FRST.exe
2013-09-06 12:40 - 2013-09-06 12:39 - 00000843 _____ C:\Users\Aleman\Desktop\JRT.txt
2013-09-06 12:39 - 2009-07-14 00:34 - 00014592 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-06 12:39 - 2009-07-14 00:34 - 00014592 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-06 12:36 - 2013-09-06 12:36 - 00000000 ____D C:\Windows\ERUNT
2013-09-06 12:33 - 2013-09-06 12:33 - 00000854 _____ C:\Users\Aleman\Desktop\AdwCleaner[S1].txt
2013-09-06 12:31 - 2013-08-08 14:31 - 00009032 _____ C:\Windows\setupact.log
2013-09-06 12:31 - 2013-06-01 12:04 - 01326830 _____ C:\Windows\WindowsUpdate.log
2013-09-06 12:31 - 2009-07-14 00:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-06 12:30 - 2013-09-06 12:18 - 00000000 ____D C:\AdwCleaner
2013-09-06 12:13 - 2013-06-04 14:55 - 00000838 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-06 12:08 - 2013-09-04 08:31 - 00001510 _____ C:\Windows\PFRO.log
2013-09-06 08:41 - 2013-09-06 08:40 - 01028823 _____ (Thisisu) C:\Users\Aleman\Downloads\JRT.exe
2013-09-06 08:40 - 2013-09-06 08:40 - 01037222 _____ C:\Users\Aleman\Downloads\adwcleaner.exe
2013-09-06 08:39 - 2013-09-06 08:39 - 00000000 ____D C:\Users\Aleman\AppData\Roaming\Malwarebytes
2013-09-06 08:38 - 2013-09-06 08:38 - 00001071 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-09-06 08:38 - 2013-09-06 08:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-06 08:38 - 2013-09-06 08:38 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-09-06 08:38 - 2013-09-06 08:36 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Aleman\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-05 15:26 - 2013-09-05 15:25 - 00020518 _____ C:\Users\Aleman\Downloads\Addition.txt
2013-09-05 15:23 - 2013-09-05 15:23 - 00000000 ____D C:\FRST
2013-09-05 11:26 - 2013-06-02 09:46 - 01670586 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-05 10:53 - 2013-07-05 20:47 - 00001209 _____ C:\Users\Aleman\Documents\VideoCacheView.cfg
2013-09-04 11:34 - 2013-07-04 16:11 - 00000372 _____ C:\Users\Aleman\Desktop\To Do List.txt
2013-09-04 10:25 - 2013-09-04 09:57 - 00000000 ____D C:\Users\Aleman\Desktop\Nueva carpeta
2013-09-03 23:04 - 2013-09-03 23:04 - 00000000 ____D C:\Program Files\ESET
2013-09-03 23:04 - 2013-09-03 23:03 - 02347384 _____ (ESET) C:\Users\Aleman\Downloads\esetsmartinstaller_deu.exe
2013-09-03 22:56 - 2013-09-03 22:49 - 00000000 ____D C:\Program Files\VideoLAN
2013-09-03 22:54 - 2013-09-03 22:51 - 00000000 ____D C:\Users\Aleman\AppData\Roaming\vlc
2013-09-03 22:48 - 2013-09-03 22:43 - 23003252 _____ C:\Users\Aleman\Downloads\vlc-2.0.8_win32 (1).exe
2013-09-03 22:42 - 2013-09-03 22:39 - 17551900 _____ C:\Users\Aleman\Downloads\vlc-2.0.8_win32.exe
2013-09-03 22:33 - 2013-09-03 22:33 - 00923791 _____ C:\Users\Aleman\Downloads\DivFix++_v0.34-Win32.zip
2013-09-03 19:42 - 2013-08-27 00:17 - 00000000 ____D C:\Program Files\Convar
2013-08-31 16:41 - 2013-08-30 19:56 - 00000551 _____ C:\Users\Aleman\Desktop\robi michel.txt
2013-08-30 22:17 - 2013-06-16 15:41 - 00000000 ____D C:\Users\Aleman\AppData\Roaming\Skype
2013-08-30 20:41 - 2013-08-30 20:38 - 00000000 ____D C:\Users\Aleman\Downloads\Real Social Dynamics (Tyler Durden) - The Blueprint Decoded DVDs
2013-08-30 20:24 - 2013-08-30 20:23 - 01736456 _____ (Torch Media Inc.) C:\Users\Aleman\Downloads\TorchSetup.exe
2013-08-30 17:53 - 2013-08-28 14:02 - 00000000 ____D C:\Users\Aleman\AppData\Local\CrashDumps
2013-08-28 16:54 - 2013-06-04 09:01 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-28 15:38 - 2013-08-27 14:25 - 00003584 _____ C:\Users\Aleman\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-08-27 14:35 - 2013-08-27 00:02 - 00000000 ____D C:\Program Files\Recuva
2013-08-27 14:23 - 2013-08-27 14:23 - 00000000 ____D C:\Users\Aleman\AppData\Roaming\TechSmith
2013-08-27 14:23 - 2013-08-27 14:23 - 00000000 ____D C:\Users\Aleman\AppData\Local\TechSmith
2013-08-27 14:22 - 2013-08-27 14:22 - 00000000 ____D C:\Users\Aleman\Documents\Camtasia Studio
2013-08-27 14:21 - 2013-06-01 18:19 - 00000000 ____D C:\Users\Aleman
2013-08-27 14:19 - 2013-08-27 14:19 - 00001126 _____ C:\Users\Public\Desktop\Camtasia Studio 8.lnk
2013-08-27 14:19 - 2013-08-27 14:19 - 00000000 ____D C:\Program Files\QuickTime
2013-08-27 14:18 - 2013-08-27 14:18 - 00000000 ____D C:\ProgramData\TechSmith
2013-08-27 14:18 - 2013-08-27 14:18 - 00000000 ____D C:\Program Files\TechSmith
2013-08-27 14:18 - 2013-08-27 14:18 - 00000000 ____D C:\Program Files\Common Files\TechSmith Shared
2013-08-27 00:17 - 2013-08-27 00:14 - 03462033 _____ C:\Users\Aleman\Downloads\pci_4filerecovery.exe
2013-08-27 00:01 - 2013-08-26 23:56 - 03843072 _____ (Piriform Ltd) C:\Users\Aleman\Downloads\rcsetup148.exe
2013-08-26 16:11 - 2013-08-26 16:06 - 05401856 _____ C:\Users\Aleman\Downloads\HC228SetDE.exe
2013-08-26 14:48 - 2013-08-26 14:44 - 04215463 _____ C:\Users\Aleman\Downloads\setupautoscreenrecorder31375.exe
2013-08-25 20:27 - 2013-06-04 14:55 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-08-25 20:27 - 2013-06-04 14:55 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-08-19 08:21 - 2009-07-14 00:53 - 00032620 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-16 01:33 - 2009-07-13 22:37 - 00000000 ____D C:\Windows\rescache
2013-08-15 19:42 - 2009-07-13 22:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-08-15 08:25 - 2013-06-01 12:59 - 00000000 ____D C:\Windows\Panther
2013-08-14 23:30 - 2013-08-14 23:26 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 23:26 - 2013-06-06 11:57 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-14 23:11 - 2013-08-14 21:49 - 126371493 _____ C:\Users\Aleman\Downloads\Carlos Vives - Corazon Profundo (2013).zip
2013-08-10 21:36 - 2013-07-22 09:38 - 00000442 _____ C:\Users\Aleman\Desktop\Autosuggestion.txt
2013-08-09 11:52 - 2013-07-25 19:07 - 00000000 ____D C:\Users\Aleman\Desktop\Motivation
2013-08-08 14:31 - 2013-08-08 14:31 - 00000000 _____ C:\Windows\setuperr.log
2013-08-08 10:00 - 2013-06-04 15:10 - 00000000 ____D C:\Users\Aleman\AppData\Roaming\Winamp
2013-08-08 08:41 - 2013-06-12 21:24 - 00000000 ____D C:\Windows\Minidump
2013-08-08 08:41 - 2013-06-05 19:02 - 00000000 ____D C:\Program Files\PDFCreator
2013-08-08 08:38 - 2013-08-08 08:38 - 00000000 ____D C:\Program Files\CCleaner
2013-08-08 08:37 - 2013-08-08 08:36 - 03395840 _____ (Piriform Ltd) C:\Users\Aleman\Downloads\ccsetup404_slim.exe

Files to move or delete:
====================
C:\Users\Aleman\AppData\Local\Temp\Foxit Updater.exe
C:\Users\Aleman\AppData\Local\Temp\Quarantine.exe
C:\Users\Aleman\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Aleman\AppData\Local\Temp\WLZ89DB.tmp\CddbLangDE.dll
C:\Users\Aleman\AppData\Local\Temp\Rar$EXa0.757\DivFix++_v0.34\DivFix++.exe
C:\Users\Aleman\AppData\Local\Temp\jrt\erunt\ERUNT.EXE
C:\Users\Aleman\AppData\Local\Temp\Camtasia_Setup\Prerequisites\DotNetFX40Client\dotNetFx40_Client_setup.exe

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-01 15:00

==================== End Of Log ============================
         

--- --- ---

--- --- ---

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?