Win 7 x64 startet langsam - BProtector.E/BHO.Protector.1.4

Kasseläner · 06.12.2013, 01:07

Hallo,

vorweg möchte ich erwähnen, dass ich neu hier bin und mich nur suboptimal auskenne.

Bei dem Problem-System handelt es sich um das Notebook einer Freundin, win 7 x64.
Relativ neues Notebook mit 6 GB Ram und i5 Prozessor. Trotzdem dauert der Start von Windows seit neustem sehr lange. ("Willkommen" für über 30 Sekunden etc.)

In der Quarantäne von Avira habe ich BProtector.E und BHO.Protector.1.4 gefunden. Leider gibt es keinen Bericht.

Ich muss zugeben, dass ich es zuerst allein Probieren wollte mit AdwCleaner und Malwarebytes. Leider dauert das booten immer noch ewig.

Im Anhang die verschiedenen Log-Dateien.

AdwCleaner erster Bericht:

Code:

ATTFilter

# AdwCleaner v3.014 - Bericht erstellt am 05/12/2013 um 20:20:29
# Updated 01/12/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Aleksa - ALEKSA-PC
# Gestartet von : F:\AdwCleaner-3.014.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\Users\Aleksa\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
Datei Gefunden : C:\Windows\System32\Tasks\Browser Manager
Ordner Gefunden C:\Program Files (x86)\Common Files\DVDVideoSoft\TB
Ordner Gefunden C:\Program Files (x86)\ICQ6Toolbar
Ordner Gefunden C:\ProgramData\Babylon
Ordner Gefunden C:\ProgramData\IBUpdaterService
Ordner Gefunden C:\ProgramData\ICQ\ICQToolbar
Ordner Gefunden C:\ProgramData\Partner
Ordner Gefunden C:\ProgramData\Trymedia
Ordner Gefunden C:\Users\Aleksa\AppData\LocalLow\boost_interprocess
Ordner Gefunden C:\Users\Aleksa\AppData\LocalLow\Claro LTD
Ordner Gefunden C:\Users\Aleksa\AppData\Roaming\Babylon
Ordner Gefunden C:\Users\Aleksa\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gefunden C:\Users\Aleksa\AppData\Roaming\file scout
Ordner Gefunden C:\Users\Aleksa\AppData\Roaming\OpenCandy
Ordner Gefunden C:\Users\Aleksa\AppData\Roaming\SenselessTV

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Daten Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~3\bitguard\271769~1.27\{61d8b~1\loader.dll
Daten Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~3\bitguard\271832~1.68\{61d8b~1\loader.dll
Schlüssel Gefunden : HKCU\Software\5a53dad0b434ee48
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gefunden : HKCU\Software\BabSolution
Schlüssel Gefunden : HKCU\Software\DataMngr
Schlüssel Gefunden : HKCU\Software\DataMngr_Toolbar
Schlüssel Gefunden : HKCU\Software\filescout
Schlüssel Gefunden : HKCU\Software\FLEXnet
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Web-Suche
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{991D97B8-F0D8-4EA1-9100-7A65EA2D3A63}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9E131A93-EED7-4BEB-B015-A0ADB30B5646}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{991D97B8-F0D8-4EA1-9100-7A65EA2D3A63}
Schlüssel Gefunden : HKCU\Software\Softonic
Schlüssel Gefunden : HKCU\Software\Trymedia Systems
Schlüssel Gefunden : [x64] HKCU\Software\BabSolution
Schlüssel Gefunden : [x64] HKCU\Software\DataMngr
Schlüssel Gefunden : [x64] HKCU\Software\DataMngr_Toolbar
Schlüssel Gefunden : [x64] HKCU\Software\filescout
Schlüssel Gefunden : [x64] HKCU\Software\FLEXnet
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gefunden : [x64] HKCU\Software\Softonic
Schlüssel Gefunden : [x64] HKCU\Software\Trymedia Systems
Schlüssel Gefunden : HKLM\SOFTWARE\5a53dad0b434ee48
Schlüssel Gefunden : HKLM\Software\Babylon
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\*\shell\filescout
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{C3110516-8EFC-49D6-8B72-69354F332062}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{991D97B8-F0D8-4EA1-9100-7A65EA2D3A63}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\driverscanner
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gefunden : HKLM\Software\DataMngr
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\jlicihemmeabfjhdckhpkmopojohlkab
Schlüssel Gefunden : HKLM\Software\ICQ\ICQToolbar
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Savings Sidekick_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\Savings Sidekick_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_mcafee-labs-stinger_RASAPI32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_mcafee-labs-stinger_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_rasmancs
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{991D97B8-F0D8-4EA1-9100-7A65EA2D3A63}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Senseless.TV Video Plugin
Schlüssel Gefunden : HKLM\Software\Uniblue
Schlüssel Gefunden : HKLM\Software\Uniblue\DriverScanner
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Wert Gefunden : HKCU\Software\Mozilla\Firefox\Extensions [support@Senseless.TV]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{9E131A93-EED7-4BEB-B015-A0ADB30B5646}]
Wert Gefunden : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [support@Senseless.TV]

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428

Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search] - hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd

-\\ Google Chrome v

[ Datei : C:\Users\Aleksa\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [6570 octets] - [05/12/2013 20:20:29]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [6630 octets] ##########

AdwCleaner zweiter Bericht:

Code:

ATTFilter

# AdwCleaner v3.014 - Bericht erstellt am 05/12/2013 um 20:26:18
# Updated 01/12/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Aleksa - ALEKSA-PC
# Gestartet von : F:\AdwCleaner-3.014.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Google Chrome v

[ Datei : C:\Users\Aleksa\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [6750 octets] - [05/12/2013 20:20:29]
AdwCleaner[R1].txt - [964 octets] - [05/12/2013 20:25:09]
AdwCleaner[S0].txt - [6223 octets] - [05/12/2013 20:22:02]
AdwCleaner[S1].txt - [886 octets] - [05/12/2013 20:26:18]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [945 octets] ##########

defogger_disable

Code:

ATTFilter

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 00:11 on 06/12/2013 (Aleksa)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-

FRST

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-12-2013
Ran by Aleksa (administrator) on ALEKSA-PC on 06-12-2013 00:15:27
Running from C:\Users\Aleksa\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Runonce: [NCInstallQueue] - rundll32 netman.dll,ProcessQueue
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
MountPoints2: {bf0cd09f-e5ee-11e0-8e22-bcaec535ca10} - F:\Startme.exe
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-19] (Avira Operations GmbH & Co. KG)
HKU\UpdatusUser\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler
HKU\UpdatusUser\...\Run: [swg] - "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [226920 2010-12-27] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: af0.Adblock.BHO - {90EFF544-3981-4d46-85C9-C0361D0931D6} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/ig/redirectdomain?brand=ASUT&bmod=ASUT
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-11-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-19] (Avira Operations GmbH & Co. KG)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S4 tor; C:\Program Files (x86)\Tor\tor.exe [3233806 2013-09-08] ()

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107416 2013-12-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-11-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)
S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)
S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)
S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)
S3 s1018nd5; C:\Windows\System32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation)
S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)
S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800832 2010-09-07] (Sonix Technology Co., Ltd.)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-17] ()
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]

==================== NetSvcs (Whitelisted) ===================

Additions

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-12-2013
Ran by Aleksa at 2013-12-06 00:14:58
Running from C:\Users\Aleksa\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (x32)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
AdblockIE (x32 Version: 1.2)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
ALDI NORD Bestellsoftware 4.9 (x32 Version: 4.9)
ASUS FancyStart (x32 Version: 1.0.8)
ASUS LifeFrame3 (x32 Version: 3.0.20)
ASUS Live Update (x32 Version: 3.0.6)
ASUS Power4Gear Hybrid (Version: 1.1.43)
ASUS SmartLogon (x32 Version: 1.0.0008)
ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0030)
ASUS Virtual Camera (x32 Version: 1.0.20)
ATK Package (x32 Version: 1.0.0007)
Avira Free Antivirus (x32 Version: 14.0.1.759)
Bookworm Deluxe (x32)
Burger Bustle (x32 Version: 1.0.0)
Burger Island 2 1.00 (x32)
Carcassonne (x32 Version: 1.0)
CCleaner (Version: 3.24)
Complément Messenger (x32 Version: 15.4.3502.0922)
Complemento Messenger (x32 Version: 15.4.3502.0922)
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2)
Cooking Dash (x32)
D3DX10 (x32 Version: 15.4.2368.0902)
DivX-Setup (x32 Version: 2.6.0.34)
ETDWare PS/2-X64 8.0.5.0_WHQL (Version: 8.0.5.0)
Fast Boot (Version: 1.0.8)
Free YouTube to MP3 Converter version 3.11.37.1212 (x32 Version: 3.11.37.1212)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Game Park Console (x32 Version: 6.2.1.1)
Governor of Poker (x32)
Hotel Dash Suite Success (x32)
ICQ7.6 (x32 Version: 7.6)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2253)
Intel(R) Turbo Boost Technology Monitor (Version: 1.0.400.4)
Java 7 Update 45 (x32 Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.8)
Jewel Quest 3 (x32)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Luxor 3 (x32)
Mahjongg dimensions (x32)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Marias Restaurant (x32)
Mesh Runtime (x32 Version: 15.4.5722.2)
Messenger Companion (x32 Version: 15.4.3502.0922)
Messenger 分享元件 (x32 Version: 15.4.3502.0922)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Professional Edition 2003 (x32 Version: 11.0.8173.0)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0)
NVIDIA Control Panel 266.43 (Version: 266.43)
NVIDIA Graphics Driver 266.43 (Version: 266.43)
NVIDIA Install Application (Version: 2.265.36.0)
NVIDIA Optimus 1.0.11 (Version: 1.0.11)
NVIDIA Update Components (Version: 1.0.11)
Plants vs Zombies (x32)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Realtek Ethernet Controller Driver For Windows 7 (x32 Version: 7.21.531.2010)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6278)
Realtek USB 2.0 Reader Driver (x32 Version: 6.1.7600.10001)
Skype™ 6.0 (x32 Version: 6.0.126)
Sonic Focus (x32 Version: 1.00.0000)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2825642) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Outlook 2007 Help (KB963677) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
USB2.0 UVC VGA WebCam (Version: 5.8.55133.208)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
VLC media player 1.1.11 (x32 Version: 1.1.11)
Winamp (nur entfernen) (x32)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Family Safety (Version: 15.4.3502.0922)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3502.0922)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3502.0922)
Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3502.0922)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3502.0922)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Live 影像中心 (x32 Version: 15.4.3502.0922)
Windows Live 程式集 (x32 Version: 15.4.3502.0922)
Windows Mobile Device Updater Component (Version: 04.08.2345.00)
WinFlash (x32 Version: 2.31.0)
WinRAR 4.11 (64-Bit) (Version: 4.11.0)
Wireless Console 3 (x32 Version: 3.0.19)
World of Goo (x32)
Youda Kindergarten (x32)
Zune (Version: 04.08.2345.00)
Zune Language Pack (CHS) (Version: 04.08.2345.00)
Zune Language Pack (CHT) (Version: 04.08.2345.00)
Zune Language Pack (CSY) (Version: 04.08.2345.00)
Zune Language Pack (DAN) (Version: 04.08.2345.00)
Zune Language Pack (DEU) (Version: 04.08.2345.00)
Zune Language Pack (ELL) (Version: 04.08.2345.00)
Zune Language Pack (ESP) (Version: 04.08.2345.00)
Zune Language Pack (FIN) (Version: 04.08.2345.00)
Zune Language Pack (FRA) (Version: 04.08.2345.00)
Zune Language Pack (HUN) (Version: 04.08.2345.00)
Zune Language Pack (IND) (Version: 04.08.2345.00)
Zune Language Pack (ITA) (Version: 04.08.2345.00)
Zune Language Pack (JPN) (Version: 04.08.2345.00)
Zune Language Pack (KOR) (Version: 04.08.2345.00)
Zune Language Pack (MSL) (Version: 04.08.2345.00)
Zune Language Pack (NLD) (Version: 04.08.2345.00)
Zune Language Pack (NOR) (Version: 04.08.2345.00)
Zune Language Pack (PLK) (Version: 04.08.2345.00)
Zune Language Pack (PTB) (Version: 04.08.2345.00)
Zune Language Pack (PTG) (Version: 04.08.2345.00)
Zune Language Pack (RUS) (Version: 04.08.2345.00)
Zune Language Pack (SVE) (Version: 04.08.2345.00)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (x32 Version: 15.4.5722.2)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922)
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922)
מסייע Messenger (x32 Version: 15.4.3502.0922)
פקד ActiveX של Windows Live Mesh עבור חיבורים מרוחקים (x32 Version: 15.4.5722.2)
適用遠端連線的 Windows Live Mesh ActiveX 控制項 (x32 Version: 15.4.5722.2)

==================== Restore Points  =========================

20-11-2013 23:36:13 Windows Update
28-11-2013 12:31:58 Geplanter Prüfpunkt
03-12-2013 10:45:27 Installed SpyHunter
03-12-2013 12:47:10 Removed SpyHunter

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {4EDB54A2-80D2-476F-84C0-D5A3C8975756} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-08-17] (ASUS)
Task: {5369BFE2-3CCC-482E-83D4-A1CBAB3443DE} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2009-07-31] (ASUS)
Task: {5DBB4E19-BF67-4F63-9546-494F61880010} - System32\Tasks\AdobeFlashPlayerUpdate => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe
Task: {ACD54056-C000-4CF5-9928-5CD6407EAF9C} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2010-08-02] (ASUS)
Task: {B9163A2E-BB31-4F09-9307-7216A742AFF7} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2011-08-31] (ASUSTeK Computer Inc.)
Task: {BB7A8E92-B9C3-469E-9D60-134C97C55289} - System32\Tasks\{74D0A84D-0BFB-44B7-871E-6BF75B3CB398} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-11-09] (Skype Technologies S.A.)
Task: {D4CEC0D3-80AC-40A3-AC5A-E04D4B015FFF} - System32\Tasks\ASUS P4G => C:\Program Files\P4G\BatteryLife.exe [2010-12-02] (ASUS)
Task: {D9A612ED-308D-4EA4-982B-22FFF95E7391} - \Browser Manager No Task File
Task: {F2C58917-0FAF-4ED9-8F73-610ACC669E6C} - System32\Tasks\AdobeFlashPlayerUpdate 2 => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe
Task: {F8758D6C-3066-4939-A491-74ED39284069} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-10-24] (Piriform Ltd)

==================== Loaded Modules (whitelisted) =============

2012-04-29 18:00 - 2012-02-17 19:55 - 00193536 _____ () C:\Program Files\WinRAR\rarext.dll
2010-04-03 04:21 - 2008-10-01 08:08 - 00011264 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
2010-07-15 01:11 - 2010-07-15 01:11 - 00031360 _____ () C:\Program Files\P4G\DevMng.dll
2013-03-25 08:56 - 2013-03-25 08:50 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2011-08-31 14:33 - 2011-08-31 14:33 - 00208384 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\alvupdt.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:3AE22B1A
AlternateDataStreams: C:\ProgramData\Temp:41099CE9
AlternateDataStreams: C:\ProgramData\Temp:5D458568
AlternateDataStreams: C:\ProgramData\Temp:D20FFA63

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================
Error: (02/04/2012 01:39:09 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 3633 seconds with 2460 seconds of active time.  This session ended with a crash.

Error: (10/21/2011 03:12:40 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6562.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 21 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (10/21/2011 03:12:08 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6562.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 17 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (10/21/2011 03:11:43 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6562.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 10 seconds with 0 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Percentage of memory in use: 28%
Total physical RAM: 6055.77 MB
Available physical RAM: 4357.19 MB
Total Pagefile: 12109.72 MB
Available Pagefile: 10081.76 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:116.44 GB) (Free:57.75 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (DATA) (Fixed) (Total:327.83 GB) (Free:262.36 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: E0C5913D)
Partition 1: (Not Active) - (Size=21 GB) - (Type=1C)
Partition 2: (Active) - (Size=116 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=328 GB) - (Type=OF Extended)

==================== End Of Log ============================

Gmer

Code:

ATTFilter

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-12-06 00:39:14
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD50 rev.01.0 465,76GB
Running: tsfxi9n0.exe; Driver: C:\Users\Aleksa\AppData\Local\Temp\fwdiqpoc.sys


---- Threads - GMER 2.1 ----

Thread   [1312:1328]  00000000759b7587
Thread   [1312:1360]  0000000073c7c59c
Thread   [1312:1436]  0000000073c7c59c
Thread   [1312:1440]  0000000073c7c59c
Thread   [1312:1444]  0000000073c7c59c
Thread   [1312:1620]  0000000073b932fb
Thread   [1312:2624]  0000000077c52e65
Thread   [1312:1272]  0000000077c53e85

---- EOF - GMER 2.1 ----

Ich hoffe das hilft euch erst einmal weiter und ihr könnt mir weiter helfen.

Gruß

Kasseläner

schrauber · 06.12.2013, 08:58

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Kasseläner · 06.12.2013, 11:25

Guten Morgen schrauber,

danke für die schnelle Antwort.

Combofix

Code:

ATTFilter

ComboFix 13-12-06.01 - Aleksa 06.12.2013  11:13:22.2.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.6056.4194 [GMT 1:00]
ausgeführt von:: c:\users\Aleksa\Desktop\ComboFix.exe
AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-11-06 bis 2013-12-06  ))))))))))))))))))))))))))))))
.
.
2013-12-06 10:16 . 2013-12-06 10:16	--------	d-----w-	c:\users\UpdatusUser\AppData\Local\temp
2013-12-06 10:16 . 2013-12-06 10:16	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-12-05 23:13 . 2013-12-05 23:13	--------	d-----w-	C:\FRST
2013-12-05 22:45 . 2013-12-05 22:45	--------	d-----w-	c:\windows\ERUNT
2013-12-05 19:38 . 2013-12-05 19:38	--------	d-----w-	c:\users\Aleksa\AppData\Roaming\Malwarebytes
2013-12-05 19:38 . 2013-12-05 19:38	--------	d-----w-	c:\programdata\Malwarebytes
2013-12-05 19:38 . 2013-04-04 13:50	25928	----a-w-	c:\windows\system32\drivers\mbam.sys
2013-12-05 19:38 . 2013-12-05 19:38	--------	d-----w-	c:\program files (x86)\Malwarebytes' Anti-Malware
2013-12-05 19:37 . 2013-12-05 19:37	--------	d-----w-	c:\users\Aleksa\AppData\Local\Programs
2013-12-05 19:20 . 2013-12-05 23:04	--------	d-----w-	C:\AdwCleaner
2013-12-03 10:46 . 2013-12-03 10:46	--------	d-----w-	c:\program files\Enigma Software Group
2013-12-03 10:45 . 2013-12-03 12:48	--------	d-----w-	c:\windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2013-12-03 10:45 . 2013-12-03 10:45	--------	d-----w-	c:\program files (x86)\Common Files\Wise Installation Wizard
2013-11-27 16:21 . 2013-11-27 16:21	--------	d-----w-	c:\programdata\McAfee
2013-11-20 23:43 . 2013-10-14 17:00	28368	----a-w-	c:\windows\system32\IEUDINIT.EXE
2013-11-20 23:40 . 2013-11-20 23:40	940032	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2013-11-20 23:40 . 2013-11-20 23:40	194048	----a-w-	c:\windows\SysWow64\elshyph.dll
2013-11-14 21:48 . 2013-10-05 20:25	1474048	----a-w-	c:\windows\system32\crypt32.dll
2013-11-14 21:48 . 2013-10-05 19:57	1168384	----a-w-	c:\windows\SysWow64\crypt32.dll
2013-11-14 21:48 . 2013-09-28 01:09	497152	----a-w-	c:\windows\system32\drivers\afd.sys
2013-11-14 21:48 . 2013-10-04 02:24	1930752	----a-w-	c:\windows\system32\authui.dll
2013-11-14 21:48 . 2013-10-04 02:28	190464	----a-w-	c:\windows\system32\SmartcardCredentialProvider.dll
2013-11-14 21:48 . 2013-10-04 02:25	197120	----a-w-	c:\windows\system32\credui.dll
2013-11-14 21:48 . 2013-10-04 01:58	152576	----a-w-	c:\windows\SysWow64\SmartcardCredentialProvider.dll
2013-11-14 21:48 . 2013-10-04 01:56	168960	----a-w-	c:\windows\SysWow64\credui.dll
2013-11-14 21:48 . 2013-10-04 01:56	1796096	----a-w-	c:\windows\SysWow64\authui.dll
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-12-06 09:13 . 2011-09-11 15:37	45056	----a-w-	c:\windows\SysWow64\acovcnt.exe
2013-12-03 09:35 . 2013-03-25 14:08	107416	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2013-11-19 11:12 . 2013-03-25 14:08	132600	----a-w-	c:\windows\system32\drivers\avipbb.sys
2013-11-15 07:29 . 2011-09-14 07:38	82896128	----a-w-	c:\windows\system32\MRT.exe
2013-10-26 08:31 . 2013-10-26 08:31	96168	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-10-07 14:28 . 2013-05-06 10:55	83160	----a-w-	c:\windows\system32\drivers\avnetflt.sys
2013-10-07 14:28 . 2013-03-25 14:08	28600	----a-w-	c:\windows\system32\drivers\avkmgr.sys
2013-09-08 02:30 . 2013-10-10 07:59	1903552	----a-w-	c:\windows\system32\drivers\tcpip.sys
2013-09-08 02:27 . 2013-10-10 07:59	327168	----a-w-	c:\windows\system32\mswsock.dll
2013-09-08 02:03 . 2013-10-10 07:59	231424	----a-w-	c:\windows\SysWow64\mswsock.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-11-19 683576]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUVStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUVStor.sys [x]
R3 s1018bus;Sony Ericsson Device 1018 driver (WDM);c:\windows\system32\DRIVERS\s1018bus.sys;c:\windows\SYSNATIVE\DRIVERS\s1018bus.sys [x]
R3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s1018mdfl.sys;c:\windows\SYSNATIVE\DRIVERS\s1018mdfl.sys [x]
R3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s1018mdm.sys;c:\windows\SYSNATIVE\DRIVERS\s1018mdm.sys [x]
R3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s1018mgmt.sys;c:\windows\SYSNATIVE\DRIVERS\s1018mgmt.sys [x]
R3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS);c:\windows\system32\DRIVERS\s1018nd5.sys;c:\windows\SYSNATIVE\DRIVERS\s1018nd5.sys [x]
R3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s1018obex.sys;c:\windows\SYSNATIVE\DRIVERS\s1018obex.sys [x]
R3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM);c:\windows\system32\DRIVERS\s1018unic.sys;c:\windows\SYSNATIVE\DRIVERS\s1018unic.sys [x]
R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys;c:\windows\SYSNATIVE\DRIVERS\SiSG664.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R4 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe;c:\windows\SYSNATIVE\FBAgent.exe [x]
R4 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R4 tor;Tor Win32 Service;c:\program files (x86)\Tor\tor.exe;c:\program files (x86)\Tor\tor.exe [x]
R4 TurboBoost;Intel(R) Turbo Boost Technology Monitor;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 ATKWMIACPIIO;ATKWMIACPI Driver;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"NCInstallQueue"="netman.dll" [2009-07-14 360448]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.de/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Free YouTube to MP3 Converter - c:\users\Aleksa\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Nach Microsoft &Excel exportieren - c:\progra~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: {{7644E42D-B096-457F-8B5B-901238FC81AE} - c:\program files (x86)\ICQ7.6\ICQ.exe
TCP: DhcpNameServer = 192.168.178.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-12-06  11:17:29
ComboFix-quarantined-files.txt  2013-12-06 10:17
ComboFix2.txt  2013-12-06 10:08
.
Vor Suchlauf: 17 Verzeichnis(se), 64.076.435.456 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 63.879.012.352 Bytes frei
.
- - End Of File - - 74F592DC741D3D9E173BF37F4BA082EE

Bis zum nächsten Mal. ;-)

Gruß

Kasseläner

schrauber · 07.12.2013, 11:30

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Kasseläner · 08.12.2013, 14:41

Hallo

Malwarebytes

Code:

ATTFilter

 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.12.08.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16428
Aleksa :: ALEKSA-PC [Administrator]

Schutz: Aktiviert

08.12.2013 10:19:40
mbam-log-2013-12-08 (10-19-40).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 450980
Laufzeit: 58 Minute(n), 39 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

AdwCleaner

Code:

ATTFilter

# AdwCleaner v3.014 - Bericht erstellt am 08/12/2013 um 13:14:24
# Updated 01/12/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Aleksa - ALEKSA-PC
# Gestartet von : C:\Users\Aleksa\Desktop\AdwCleaner-3.014.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\OCS

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Google Chrome v

[ Datei : C:\Users\Aleksa\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [6750 octets] - [05/12/2013 20:20:29]
AdwCleaner[R1].txt - [964 octets] - [05/12/2013 20:25:09]
AdwCleaner[R2].txt - [1170 octets] - [05/12/2013 23:29:17]
AdwCleaner[R3].txt - [1230 octets] - [06/12/2013 00:04:03]
AdwCleaner[R4].txt - [1234 octets] - [08/12/2013 13:13:43]
AdwCleaner[S0].txt - [6223 octets] - [05/12/2013 20:22:02]
AdwCleaner[S1].txt - [1024 octets] - [05/12/2013 20:26:18]
AdwCleaner[S2].txt - [1110 octets] - [08/12/2013 13:14:24]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1170 octets] ##########

Junkware Remove Tool

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by Aleksa on 08.12.2013 at 13:18:27,06
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.12.2013 at 13:23:28,73
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST log wurde überlesen und muss ich dir daher noch nachreichen. Ich hoffe du kannst trotzdem schon einmal etwas damit anfangen.

Gruß Kasseläner

schrauber · 08.12.2013, 17:06

Mach FRST einfach jetzt nach der folgenden Anleitung:

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Kasseläner · 08.12.2013, 20:52

Hallo schrauber,

habe jetzt noch die regulär erstellte FRST.txt

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-12-2013 02
Ran by Aleksa (administrator) on ALEKSA-PC on 08-12-2013 15:01:03
Running from C:\Users\Aleksa\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Runonce: [NCInstallQueue] - rundll32 netman.dll,ProcessQueue
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-19] (Avira Operations GmbH & Co. KG)
HKU\UpdatusUser\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler
HKU\UpdatusUser\...\Run: [swg] - "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [226920 2010-12-27] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: af0.Adblock.BHO - {90EFF544-3981-4d46-85C9-C0361D0931D6} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/ig/redirectdomain?brand=ASUT&bmod=ASUT
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-11-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-19] (Avira Operations GmbH & Co. KG)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S4 tor; C:\Program Files (x86)\Tor\tor.exe [3233806 2013-09-08] ()

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107416 2013-12-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-11-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)
S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)
S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)
S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)
S3 s1018nd5; C:\Windows\System32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation)
S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)
S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800832 2010-09-07] (Sonix Technology Co., Ltd.)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-17] ()
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-08 15:01 - 2013-12-08 15:01 - 00008262 _____ C:\Users\Aleksa\Desktop\FRST.txt
2013-12-08 14:58 - 2013-12-08 14:58 - 00000000 ____D C:\Users\Aleksa\Desktop\FRST-OlderVersion
2013-12-08 14:02 - 2013-12-08 14:52 - 00000112 _____ C:\Windows\setupact.log
2013-12-08 14:02 - 2013-12-08 14:02 - 00000000 _____ C:\Windows\setuperr.log
2013-12-08 13:43 - 2013-12-08 14:56 - 00000000 ____D C:\Users\Aleksa\Desktop\FRST
2013-12-06 11:20 - 2013-12-06 11:20 - 01558672 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-06 11:17 - 2013-12-06 11:17 - 00011410 _____ C:\ComboFix.txt
2013-12-06 10:52 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-12-06 10:52 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-12-06 10:52 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-12-06 10:52 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-12-06 10:52 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-12-06 10:52 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-12-06 10:52 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-12-06 10:52 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-12-06 10:51 - 2013-12-06 11:17 - 00000000 ____D C:\Qoobox
2013-12-06 10:51 - 2013-12-06 11:06 - 00000000 ____D C:\Windows\erdnt
2013-12-06 00:13 - 2013-12-08 14:58 - 00000000 ____D C:\FRST
2013-12-06 00:12 - 2013-12-08 14:58 - 01927772 _____ (Farbar) C:\Users\Aleksa\Desktop\FRST64.exe
2013-12-06 00:11 - 2013-12-06 00:11 - 00000000 _____ C:\Users\Aleksa\defogger_reenable
2013-12-05 23:45 - 2013-12-05 23:45 - 00000000 ____D C:\Windows\ERUNT
2013-12-05 20:38 - 2013-12-05 20:38 - 00000000 ____D C:\Users\Aleksa\AppData\Roaming\Malwarebytes
2013-12-05 20:38 - 2013-12-05 20:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-05 20:38 - 2013-12-05 20:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-05 20:38 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-05 20:20 - 2013-12-08 13:14 - 00000000 ____D C:\AdwCleaner
2013-12-03 11:46 - 2013-12-03 11:46 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-12-03 11:46 - 2013-12-03 11:46 - 00000000 _____ C:\autoexec.bat
2013-12-03 11:45 - 2013-12-03 13:48 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2013-11-27 17:21 - 2013-11-27 17:21 - 00000000 ____D C:\ProgramData\McAfee
2013-11-27 14:01 - 2013-11-27 14:03 - 00000000 ____D C:\Users\Aleksa\Desktop\Schule
2013-11-25 21:32 - 2013-11-25 21:32 - 00000000 ____D C:\Windows\pss
2013-11-21 00:43 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-11-21 00:40 - 2013-11-21 00:40 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-21 00:40 - 2013-11-21 00:40 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-21 00:39 - 2013-11-21 00:39 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-21 00:39 - 2013-11-21 00:39 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-21 00:39 - 2013-11-21 00:39 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-21 00:39 - 2013-11-21 00:39 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-21 00:39 - 2013-11-21 00:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-21 00:39 - 2013-11-21 00:39 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-21 00:39 - 2013-11-21 00:39 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-21 00:39 - 2013-11-21 00:39 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-21 00:39 - 2013-11-21 00:39 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-21 00:39 - 2013-11-21 00:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-14 22:48 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 22:48 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-14 22:48 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-14 22:48 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-14 22:48 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-14 22:48 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-14 22:48 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-14 22:48 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-14 22:48 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-14 22:47 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-14 22:47 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 22:47 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 22:47 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-14 22:47 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-14 22:47 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-14 22:47 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-14 22:47 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-14 22:47 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-14 22:47 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-14 22:47 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-14 22:47 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-14 22:47 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-14 22:47 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-14 22:47 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-14 22:47 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-14 22:47 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-14 22:47 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-14 22:47 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-14 22:47 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-14 22:47 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

==================== One Month Modified Files and Folders =======

2013-12-08 15:01 - 2013-12-08 15:01 - 00008262 _____ C:\Users\Aleksa\Desktop\FRST.txt
2013-12-08 15:00 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-08 15:00 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-08 14:58 - 2013-12-08 14:58 - 00000000 ____D C:\Users\Aleksa\Desktop\FRST-OlderVersion
2013-12-08 14:58 - 2013-12-06 00:13 - 00000000 ____D C:\FRST
2013-12-08 14:58 - 2013-12-06 00:12 - 01927772 _____ (Farbar) C:\Users\Aleksa\Desktop\FRST64.exe
2013-12-08 14:57 - 2009-08-04 10:51 - 00669360 _____ C:\Windows\system32\perfh007.dat
2013-12-08 14:57 - 2009-08-04 10:51 - 00135040 _____ C:\Windows\system32\perfc007.dat
2013-12-08 14:57 - 2009-07-14 06:13 - 01538262 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-08 14:56 - 2013-12-08 13:43 - 00000000 ____D C:\Users\Aleksa\Desktop\FRST
2013-12-08 14:52 - 2013-12-08 14:02 - 00000112 _____ C:\Windows\setupact.log
2013-12-08 14:52 - 2011-09-11 16:37 - 00045056 _____ C:\Windows\SysWOW64\acovcnt.exe
2013-12-08 14:52 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-08 14:06 - 2011-03-03 00:30 - 01492196 _____ C:\Windows\WindowsUpdate.log
2013-12-08 14:02 - 2013-12-08 14:02 - 00000000 _____ C:\Windows\setuperr.log
2013-12-08 13:14 - 2013-12-05 20:20 - 00000000 ____D C:\AdwCleaner
2013-12-08 10:15 - 2011-09-11 17:01 - 00003938 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{25BDCD08-03A0-444B-91D6-B1AEE73852C1}
2013-12-06 11:20 - 2013-12-06 11:20 - 01558672 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-06 11:17 - 2013-12-06 11:17 - 00011410 _____ C:\ComboFix.txt
2013-12-06 11:17 - 2013-12-06 10:51 - 00000000 ____D C:\Qoobox
2013-12-06 11:16 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-12-06 11:08 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2013-12-06 11:06 - 2013-12-06 10:51 - 00000000 ____D C:\Windows\erdnt
2013-12-06 10:21 - 2012-04-24 08:22 - 00000000 ____D C:\Windows\Minidump
2013-12-06 00:11 - 2013-12-06 00:11 - 00000000 _____ C:\Users\Aleksa\defogger_reenable
2013-12-06 00:11 - 2011-09-11 16:37 - 00000000 ____D C:\Users\Aleksa
2013-12-05 23:45 - 2013-12-05 23:45 - 00000000 ____D C:\Windows\ERUNT
2013-12-05 23:20 - 2011-09-26 16:44 - 00000000 ____D C:\Users\Aleksa\Desktop\neue installationen
2013-12-05 20:38 - 2013-12-05 20:38 - 00000000 ____D C:\Users\Aleksa\AppData\Roaming\Malwarebytes
2013-12-05 20:38 - 2013-12-05 20:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-05 20:38 - 2013-12-05 20:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-05 20:22 - 2011-09-12 08:27 - 00000000 ____D C:\ProgramData\ICQ
2013-12-03 13:48 - 2013-12-03 11:45 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2013-12-03 11:46 - 2013-12-03 11:46 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-12-03 11:46 - 2013-12-03 11:46 - 00000000 _____ C:\autoexec.bat
2013-12-03 11:30 - 2011-09-26 16:37 - 00000000 ____D C:\Users\Aleksa\AppData\Local\Adobe
2013-12-03 10:51 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-03 10:35 - 2013-03-25 15:08 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-11-27 17:21 - 2013-11-27 17:21 - 00000000 ____D C:\ProgramData\McAfee
2013-11-27 14:03 - 2013-11-27 14:01 - 00000000 ____D C:\Users\Aleksa\Desktop\Schule
2013-11-26 23:32 - 2011-09-26 09:56 - 00000000 ____D C:\Users\Aleksa\AppData\Local\Windows Live
2013-11-25 21:32 - 2013-11-25 21:32 - 00000000 ____D C:\Windows\pss
2013-11-24 18:05 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-21 11:36 - 2009-07-29 07:03 - 00000000 ____D C:\Windows\Panther
2013-11-21 10:26 - 2011-09-14 09:45 - 00001427 _____ C:\Users\Aleksa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-21 10:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-21 00:40 - 2013-11-21 00:40 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-21 00:40 - 2013-11-21 00:40 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-21 00:39 - 2013-11-21 00:39 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-21 00:39 - 2013-11-21 00:39 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-21 00:39 - 2013-11-21 00:39 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-21 00:39 - 2013-11-21 00:39 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-21 00:39 - 2013-11-21 00:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-21 00:39 - 2013-11-21 00:39 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-21 00:39 - 2013-11-21 00:39 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-21 00:39 - 2013-11-21 00:39 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-21 00:39 - 2013-11-21 00:39 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-21 00:39 - 2013-11-21 00:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-19 12:12 - 2013-03-25 15:08 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-11-16 08:54 - 2013-07-25 01:40 - 00000000 ____D C:\Windows\system32\MRT
2013-11-16 08:50 - 2011-09-11 16:39 - 00109296 _____ C:\Users\Aleksa\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-15 22:18 - 2009-07-14 05:45 - 00420672 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-15 08:32 - 2011-09-11 17:15 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-15 08:29 - 2011-09-14 08:38 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-08 20:09 - 2012-12-21 21:13 - 00000000 ____D C:\Users\Aleksa\AppData\Roaming\Skype

Some content of TEMP:
====================
C:\Users\Aleksa\AppData\Local\Temp\avgnt.exe
C:\Users\Aleksa\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-02 23:39

==================== End Of Log ============================

--- --- ---

Habe ich das in deiner letzten Nachricht richtig verstanden und ich soll mit dem ESET online scanner eine FRST.txt ertsellen?
Zusätzlich frage, rein aus Interesse. Warum soll ich externe Datenträger anschließen.

Gruß Kasseläner

schrauber · 09.12.2013, 10:17

Nein, Du sollst ESET machen, dann Securitycheck, dann ein frischces FRST log

Bei dem Onlinescan kann man evtl vorhandene externe Medien grad mitscannen, sonst nix

Kasseläner · 09.12.2013, 16:45

Hallo schrauber,

hier also noch einmal die geforderten Berichte.

ESET online scanner

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=61a0ee5bc5ca9a4ea530155a48f1a0bf
# engine=16190
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-09 10:18:12
# local_time=2013-12-09 11:18:12 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 96 10038 132347312 2805 0
# compatibility_mode=5893 16776574 100 94 13054864 138214142 0 0
# scanned=222626
# found=0
# cleaned=0
# scan_time=5468

Security Check

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.76  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 10  
``````````````Antivirus/Firewall Check:`````````````` 
Avira Desktop   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Java 7 Update 45  
 Adobe Reader XI  
````````Process Check: objlist.exe by Laurent````````  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````

FRST

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-12-2013 03
Ran by Aleksa (administrator) on ALEKSA-PC on 09-12-2013 11:35:15
Running from C:\Users\Aleksa\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Program Files\Zune\WMZuneComm.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\ielowutil.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Runonce: [NCInstallQueue] - rundll32 netman.dll,ProcessQueue
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-19] (Avira Operations GmbH & Co. KG)
HKU\UpdatusUser\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler
HKU\UpdatusUser\...\Run: [swg] - "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [226920 2010-12-27] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: af0.Adblock.BHO - {90EFF544-3981-4d46-85C9-C0361D0931D6} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/ig/redirectdomain?brand=ASUT&bmod=ASUT
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-11-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-19] (Avira Operations GmbH & Co. KG)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S4 tor; C:\Program Files (x86)\Tor\tor.exe [3233806 2013-09-08] ()

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107416 2013-12-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-11-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation)
S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation)
S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation)
S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation)
S3 s1018nd5; C:\Windows\System32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation)
S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation)
S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800832 2010-09-07] (Sonix Technology Co., Ltd.)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-17] ()
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-09 11:35 - 2013-12-09 11:35 - 00008135 _____ C:\Users\Aleksa\Desktop\FRST.txt
2013-12-09 11:35 - 2013-12-09 11:35 - 00000000 ____D C:\Users\Aleksa\Desktop\FRST-OlderVersion
2013-12-09 11:32 - 2013-12-09 11:33 - 00000000 ____D C:\Users\Aleksa\Desktop\Security check
2013-12-09 11:22 - 2013-12-09 11:22 - 00000000 ____D C:\Users\Aleksa\Desktop\Eset
2013-12-09 09:42 - 2013-12-09 09:42 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-08 16:53 - 2013-12-08 16:53 - 00000390 _____ C:\Windows\PFRO.log
2013-12-08 16:53 - 2013-12-08 16:53 - 00000056 _____ C:\Windows\setupact.log
2013-12-08 16:53 - 2013-12-08 16:53 - 00000000 _____ C:\Windows\setuperr.log
2013-12-08 16:36 - 2013-12-09 11:27 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-08 16:36 - 2013-12-08 16:36 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-08 16:36 - 2013-12-08 16:36 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-08 16:36 - 2013-12-08 16:36 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-06 11:20 - 2013-12-06 11:20 - 01558672 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-06 11:17 - 2013-12-06 11:17 - 00011410 _____ C:\ComboFix.txt
2013-12-06 10:52 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-12-06 10:52 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-12-06 10:52 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-12-06 10:52 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-12-06 10:52 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-12-06 10:52 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-12-06 10:52 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-12-06 10:52 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-12-06 10:51 - 2013-12-06 11:17 - 00000000 ____D C:\Qoobox
2013-12-06 10:51 - 2013-12-06 11:06 - 00000000 ____D C:\Windows\erdnt
2013-12-06 00:13 - 2013-12-09 11:35 - 00000000 ____D C:\FRST
2013-12-06 00:12 - 2013-12-09 11:35 - 01927998 _____ (Farbar) C:\Users\Aleksa\Desktop\FRST64.exe
2013-12-06 00:11 - 2013-12-06 00:11 - 00000000 _____ C:\Users\Aleksa\defogger_reenable
2013-12-05 23:45 - 2013-12-05 23:45 - 00000000 ____D C:\Windows\ERUNT
2013-12-05 20:38 - 2013-12-05 20:38 - 00000000 ____D C:\Users\Aleksa\AppData\Roaming\Malwarebytes
2013-12-05 20:38 - 2013-12-05 20:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-05 20:38 - 2013-12-05 20:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-05 20:38 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-05 20:20 - 2013-12-08 13:14 - 00000000 ____D C:\AdwCleaner
2013-12-03 11:46 - 2013-12-03 11:46 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-12-03 11:46 - 2013-12-03 11:46 - 00000000 _____ C:\autoexec.bat
2013-12-03 11:45 - 2013-12-03 13:48 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2013-11-27 17:21 - 2013-11-27 17:21 - 00000000 ____D C:\ProgramData\McAfee
2013-11-27 14:01 - 2013-11-27 14:03 - 00000000 ____D C:\Users\Aleksa\Desktop\Schule
2013-11-25 21:32 - 2013-11-25 21:32 - 00000000 ____D C:\Windows\pss
2013-11-21 00:43 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-11-21 00:40 - 2013-11-21 00:40 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-21 00:40 - 2013-11-21 00:40 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-21 00:39 - 2013-11-21 00:39 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-21 00:39 - 2013-11-21 00:39 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-21 00:39 - 2013-11-21 00:39 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-21 00:39 - 2013-11-21 00:39 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-21 00:39 - 2013-11-21 00:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-21 00:39 - 2013-11-21 00:39 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-21 00:39 - 2013-11-21 00:39 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-21 00:39 - 2013-11-21 00:39 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-21 00:39 - 2013-11-21 00:39 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-21 00:39 - 2013-11-21 00:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-14 22:48 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 22:48 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-14 22:48 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-14 22:48 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-14 22:48 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-14 22:48 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-14 22:48 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-14 22:48 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-14 22:48 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-14 22:47 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-14 22:47 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 22:47 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 22:47 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-14 22:47 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-14 22:47 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-14 22:47 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-14 22:47 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-14 22:47 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-14 22:47 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-14 22:47 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-14 22:47 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-14 22:47 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-14 22:47 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-14 22:47 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-14 22:47 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-14 22:47 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-14 22:47 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-14 22:47 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-14 22:47 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-14 22:47 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

==================== One Month Modified Files and Folders =======

2013-12-09 11:36 - 2013-12-09 11:35 - 00008135 _____ C:\Users\Aleksa\Desktop\FRST.txt
2013-12-09 11:35 - 2013-12-09 11:35 - 00000000 ____D C:\Users\Aleksa\Desktop\FRST-OlderVersion
2013-12-09 11:35 - 2013-12-06 00:13 - 00000000 ____D C:\FRST
2013-12-09 11:35 - 2013-12-06 00:12 - 01927998 _____ (Farbar) C:\Users\Aleksa\Desktop\FRST64.exe
2013-12-09 11:33 - 2013-12-09 11:32 - 00000000 ____D C:\Users\Aleksa\Desktop\Security check
2013-12-09 11:27 - 2013-12-08 16:36 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-09 11:22 - 2013-12-09 11:22 - 00000000 ____D C:\Users\Aleksa\Desktop\Eset
2013-12-09 10:58 - 2011-03-03 00:30 - 01525269 _____ C:\Windows\WindowsUpdate.log
2013-12-09 10:58 - 2009-08-04 10:51 - 00669360 _____ C:\Windows\system32\perfh007.dat
2013-12-09 10:58 - 2009-08-04 10:51 - 00135040 _____ C:\Windows\system32\perfc007.dat
2013-12-09 10:58 - 2009-07-14 06:13 - 01538262 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-09 10:57 - 2011-09-11 17:01 - 00003938 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{25BDCD08-03A0-444B-91D6-B1AEE73852C1}
2013-12-09 09:42 - 2013-12-09 09:42 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-08 17:01 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-08 17:01 - 2009-07-14 05:45 - 00010016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-08 16:53 - 2013-12-08 16:53 - 00000390 _____ C:\Windows\PFRO.log
2013-12-08 16:53 - 2013-12-08 16:53 - 00000056 _____ C:\Windows\setupact.log
2013-12-08 16:53 - 2013-12-08 16:53 - 00000000 _____ C:\Windows\setuperr.log
2013-12-08 16:53 - 2011-09-11 16:37 - 00045056 _____ C:\Windows\SysWOW64\acovcnt.exe
2013-12-08 16:53 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-08 16:36 - 2013-12-08 16:36 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-08 16:36 - 2013-12-08 16:36 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-08 16:36 - 2013-12-08 16:36 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-08 16:35 - 2011-09-26 16:44 - 00000000 ____D C:\Users\Aleksa\Desktop\neue installationen
2013-12-08 16:35 - 2011-09-26 16:37 - 00000000 ____D C:\Users\Aleksa\AppData\Local\Adobe
2013-12-08 13:14 - 2013-12-05 20:20 - 00000000 ____D C:\AdwCleaner
2013-12-06 11:20 - 2013-12-06 11:20 - 01558672 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-06 11:17 - 2013-12-06 11:17 - 00011410 _____ C:\ComboFix.txt
2013-12-06 11:17 - 2013-12-06 10:51 - 00000000 ____D C:\Qoobox
2013-12-06 11:16 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-12-06 11:08 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2013-12-06 11:06 - 2013-12-06 10:51 - 00000000 ____D C:\Windows\erdnt
2013-12-06 10:21 - 2012-04-24 08:22 - 00000000 ____D C:\Windows\Minidump
2013-12-06 00:11 - 2013-12-06 00:11 - 00000000 _____ C:\Users\Aleksa\defogger_reenable
2013-12-06 00:11 - 2011-09-11 16:37 - 00000000 ____D C:\Users\Aleksa
2013-12-05 23:45 - 2013-12-05 23:45 - 00000000 ____D C:\Windows\ERUNT
2013-12-05 20:38 - 2013-12-05 20:38 - 00000000 ____D C:\Users\Aleksa\AppData\Roaming\Malwarebytes
2013-12-05 20:38 - 2013-12-05 20:38 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-05 20:38 - 2013-12-05 20:38 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-05 20:22 - 2011-09-12 08:27 - 00000000 ____D C:\ProgramData\ICQ
2013-12-03 13:48 - 2013-12-03 11:45 - 00000000 ____D C:\Windows\72AAF4551E54475BB0AB5413C78D0E63.TMP
2013-12-03 11:46 - 2013-12-03 11:46 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-12-03 11:46 - 2013-12-03 11:46 - 00000000 _____ C:\autoexec.bat
2013-12-03 10:51 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-03 10:35 - 2013-03-25 15:08 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-11-27 17:21 - 2013-11-27 17:21 - 00000000 ____D C:\ProgramData\McAfee
2013-11-27 14:03 - 2013-11-27 14:01 - 00000000 ____D C:\Users\Aleksa\Desktop\Schule
2013-11-26 23:32 - 2011-09-26 09:56 - 00000000 ____D C:\Users\Aleksa\AppData\Local\Windows Live
2013-11-25 21:32 - 2013-11-25 21:32 - 00000000 ____D C:\Windows\pss
2013-11-24 18:05 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-21 11:36 - 2009-07-29 07:03 - 00000000 ____D C:\Windows\Panther
2013-11-21 10:26 - 2011-09-14 09:45 - 00001427 _____ C:\Users\Aleksa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-21 10:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-21 00:40 - 2013-11-21 00:40 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-21 00:40 - 2013-11-21 00:40 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-21 00:39 - 2013-11-21 00:39 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-21 00:39 - 2013-11-21 00:39 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-21 00:39 - 2013-11-21 00:39 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-21 00:39 - 2013-11-21 00:39 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-21 00:39 - 2013-11-21 00:39 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-21 00:39 - 2013-11-21 00:39 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-21 00:39 - 2013-11-21 00:39 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-21 00:39 - 2013-11-21 00:39 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-21 00:39 - 2013-11-21 00:39 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-21 00:39 - 2013-11-21 00:39 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-21 00:39 - 2013-11-21 00:39 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-21 00:39 - 2013-11-21 00:39 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-19 12:12 - 2013-03-25 15:08 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-11-16 08:54 - 2013-07-25 01:40 - 00000000 ____D C:\Windows\system32\MRT
2013-11-16 08:50 - 2011-09-11 16:39 - 00109296 _____ C:\Users\Aleksa\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-15 22:18 - 2009-07-14 05:45 - 00420672 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-15 08:32 - 2011-09-11 17:15 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-15 08:29 - 2011-09-14 08:38 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Some content of TEMP:
====================
C:\Users\Aleksa\AppData\Local\Temp\avgnt.exe
C:\Users\Aleksa\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-02 23:39

==================== End Of Log ============================

--- --- ---

Das Hochfahren dauert trotzdem immer noch sehr lange. Bis zum "Willkommen" von Windows läuft alles inzwischen normal. Jedoch bleibt das "Willkomen" etwa 30 Sekunden. Anschließend wird der Bildschirm schwarz und bleibt so für ca. eine Minute bevor der Desktop erscheint.

Gruß Kasseläner

schrauber · 10.12.2013, 10:21

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

S4 tor; C:\Program Files (x86)\Tor\tor.exe [3233806 2013-09-08] ()
C:\Program Files (x86)\Tor
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
C:\Program Files\Enigma Software Group

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Manuell den Rechner neu starten. Wenn es immer noch so langsam ist, AV Programm komplett deinstallieren und Rebooten ohne AV PRogramm.

Kasseläner · 10.12.2013, 11:56

Hallo schrauber,

hier der Fixlog

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 09-12-2013
Ran by Aleksa at 2013-12-10 10:41:24 Run:1
Running from C:\Users\Aleksa\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
S4 tor; C:\Program Files (x86)\Tor\tor.exe [3233806 2013-09-08] ()
C:\Program Files (x86)\Tor
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
C:\Program Files\Enigma Software Group
*****************

tor => Service deleted successfully.
C:\Program Files (x86)\Tor => Moved successfully.
esgiguard => Service deleted successfully.
C:\Program Files\Enigma Software Group => Moved successfully.

==== End of Fixlog ====

PC startete immer noch langsam.

Also Avira deinstalliert...und siehe da, Windows bootet normal.

Da ich immer deine Anweisungen deligiere hat die Freundin (schlauerweise) Avira auch gleich wieder installiert (aus Angst vor neuen Viren).

Das "Willkommen" brauch jetzt wieder so lange. Der schwarze Bildschirm erscheint dafür nur kurz. So etwa 10 sekunden bevor der Desktop erscheint.

Das ist doch schon mal super. Dann weiß man doch jetzt etwa wo das Problem liegt. Jetzt ist nur die Frage ob man den Virenscanner wechselt oder das Problem auch noch behoben bekommt.

Gruß Kasseläner

PS: Bis hierhin schon einmal vielen Dank für die super Hilfe.

schrauber · 10.12.2013, 14:04

Wechseln

Kasseläner · 10.12.2013, 15:36

Obwohl der vorher ohne Probleme funktioniert hat?

schrauber · 11.12.2013, 09:21

Wenn es selbst nach ner Neuinstallation immer noch so ist würde ich wechseln. Avria ist eh nicht empfehlenswert.

10.12.2013, 14:04	#12
schrauber /// the machine /// TB-Ausbilder	Win 7 x64 startet langsam - BProtector.E/BHO.Protector.1.4 Wechseln __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

11.12.2013, 09:21	#14
schrauber /// the machine /// TB-Ausbilder	Win 7 x64 startet langsam - BProtector.E/BHO.Protector.1.4 Wenn es selbst nach ner Neuinstallation immer noch so ist würde ich wechseln. Avria ist eh nicht empfehlenswert. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Win 7 x64 startet langsam - BProtector.E/BHO.Protector.1.4

Log-Analyse und Auswertung: Win 7 x64 startet langsam - BProtector.E/BHO.Protector.1.4