Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: HomeTab, MPSigStub.exe und mpas-fe.exe

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 03.08.2013, 08:32   #1
unknownname
 
HomeTab, MPSigStub.exe und mpas-fe.exe - Standard

HomeTab, MPSigStub.exe und mpas-fe.exe



Hallo schrauber,

sorry, dass ich mich erst jetzt wieder gemeldet habe, aber ich hatte ziemlichen Stress. Das mit AdwCleaner und JRT habe ich leider so verstanden, dass ich AdwCleaner nochmal ausführen soll, damit JRT funktioniert, da ich ja AdwCleaner vor JRT ausführen sollte.
Hier sind AdwCleaner-Dateien für vier verschiedene Ausführungen:
Code:
ATTFilter
# AdwCleaner v2.306 - Datei am 02/08/2013 um 19:22:41 erstellt
# Aktualisiert am 19/07/2013 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzer : unknownname - NOTEBOOK
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\unknownname\Desktop\adwcleaner(1).exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****


***** [Registrierungsdatenbank] *****


***** [Internet Browser] *****

-\\ Internet Explorer v10.0.9200.16635

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v22.0 (de)

Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\prefs.js

[OK] Die Datei ist sauber.

Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\s1ibhodv.default\prefs.js

[OK] Die Datei ist sauber.

*************************

AdwCleaner[R1].txt - [23215 octets] - [28/06/2013 08:50:22]
AdwCleaner[S1].txt - [23688 octets] - [28/06/2013 08:51:25]
AdwCleaner[S2].txt - [1213 octets] - [09/07/2013 13:41:24]
AdwCleaner[S3].txt - [1173 octets] - [09/07/2013 19:56:56]
AdwCleaner[S4].txt - [1294 octets] - [02/08/2013 18:52:00]
AdwCleaner[S5].txt - [1164 octets] - [02/08/2013 19:22:41]

########## EOF - C:\AdwCleaner[S5].txt - [1224 octets] ##########
         
Code:
ATTFilter
# AdwCleaner v2.304 - Datei am 09/07/2013 um 13:41:24 erstellt
# Aktualisiert am 03/07/2013 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzer : unknownname - NOTEBOOK
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\unknownname\Desktop\adwcleaner(1).exe
# Option [Löschen]


**** [Dienste] ****

Gestoppt & Gelöscht : SystemStoreService

***** [Dateien / Ordner] *****

Ordner Gelöscht : C:\Program Files (x86)\SoftwareUpdater

***** [Registrierungsdatenbank] *****


***** [Internet Browser] *****

-\\ Internet Explorer v10.0.9200.16611

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v22.0 (de)

Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\prefs.js

[OK] Die Datei ist sauber.

Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\s1ibhodv.default\prefs.js

[OK] Die Datei ist sauber.

*************************

AdwCleaner[R1].txt - [23215 octets] - [28/06/2013 08:50:22]
AdwCleaner[S1].txt - [23688 octets] - [28/06/2013 08:51:25]
AdwCleaner[S2].txt - [1084 octets] - [09/07/2013 13:41:24]

########## EOF - C:\AdwCleaner[S2].txt - [1144 octets] ##########
         
Code:
ATTFilter
# AdwCleaner v2.304 - Datei am 09/07/2013 um 19:56:56 erstellt
# Aktualisiert am 03/07/2013 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzer : unknownname - NOTEBOOK
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\unknownname\Desktop\adwcleaner(1).exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****


***** [Registrierungsdatenbank] *****


***** [Internet Browser] *****

-\\ Internet Explorer v10.0.9200.16611

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v22.0 (de)

Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\prefs.js

[OK] Die Datei ist sauber.

Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\s1ibhodv.default\prefs.js

[OK] Die Datei ist sauber.

*************************

AdwCleaner[R1].txt - [23215 octets] - [28/06/2013 08:50:22]
AdwCleaner[S1].txt - [23688 octets] - [28/06/2013 08:51:25]
AdwCleaner[S2].txt - [1213 octets] - [09/07/2013 13:41:24]
AdwCleaner[S3].txt - [1044 octets] - [09/07/2013 19:56:56]

########## EOF - C:\AdwCleaner[S3].txt - [1104 octets] ##########
         
Code:
ATTFilter
# AdwCleaner v2.306 - Datei am 02/08/2013 um 18:52:00 erstellt
# Aktualisiert am 19/07/2013 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzer : unknownname - NOTEBOOK
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\unknownname\Desktop\adwcleaner(1).exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Ordner Gelöscht : C:\Users\unknownname\AppData\Local\Freemium

***** [Registrierungsdatenbank] *****


***** [Internet Browser] *****

-\\ Internet Explorer v10.0.9200.16635

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v22.0 (de)

Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\prefs.js

[OK] Die Datei ist sauber.

Datei : C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\s1ibhodv.default\prefs.js

[OK] Die Datei ist sauber.

*************************

AdwCleaner[R1].txt - [23215 octets] - [28/06/2013 08:50:22]
AdwCleaner[S1].txt - [23688 octets] - [28/06/2013 08:51:25]
AdwCleaner[S2].txt - [1213 octets] - [09/07/2013 13:41:24]
AdwCleaner[S3].txt - [1173 octets] - [09/07/2013 19:56:56]
AdwCleaner[S4].txt - [1165 octets] - [02/08/2013 18:52:00]

########## EOF - C:\AdwCleaner[S4].txt - [1225 octets] ##########
         
Und hier FRST.txt:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-08-2013
Ran by unknownname (administrator) on 03-08-2013 09:17:49
Running from C:\Users\unknownname\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AuthenTec, Inc) C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe
(Lenovo.) C:\Windows\system32\ibmpmsvc.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Sierra Wireless, Inc.) C:\Program Files (x86)\Sierra Wireless Inc\Gobi\QDLService\GobiQDLService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
(Ericsson AB) C:\Program Files (x86)\Mobile Broadband drivers\WMCore\mini_WMCore.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\TouchControl.exe
(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\BioMonitor.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\HOTKEY\tpnumlkd.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Password Manager\password_manager.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
(BillP Studios) C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Secunia) C:\PROGRAM FILES (X86)\SECUNIA\PSI\psi_tray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Dropbox, Inc.) C:\Users\unknownname\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
(Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G DATA\AVKProxy\GdBgInx64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\Password Manager\password_manager.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe
(Lenovo Group Limited) C:\PROGRA~2\ThinkPad\UTILIT~1\SCHTASK.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\Program Files\lenovo\lenovo solution center\lsc.exe
(Lenovo) C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13519432 2013-04-10] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor)
HKLM\...\Run: [PSQLLauncher] - C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe [85864 2012-09-21] (Authentec Inc.)
HKLM\...\Run: [AcWin7Hlpr] - C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [63376 2012-09-07] (Lenovo)
HKLM\...\Run: [TpShocks] - C:\Windows\system32\TpShocks.exe [228744 2012-09-20] (Lenovo.)
HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [293232 2012-11-26] (Lenovo Group Limited)
HKLM\...\Run: [PasswordManager] - C:\Program Files\Lenovo\Password Manager\password_manager.exe [1534888 2012-10-23] (Lenovo Group Limited)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2963184 2013-04-24] (Synaptics Incorporated)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe
Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (Authentec Inc.)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKCU\...\Run: [WinPatrol] - C:\Program Files (x86)\BillP Studios\WinPatrol\winpatrol.exe [423144 2013-04-27] (BillP Studios)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [GDFirewallTray] - C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1854928 2013-03-22] (G Data Software AG)
HKLM-x32\...\Run: [RotateImage] - C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-30] (Ricoh co.,Ltd.)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [508656 2012-07-25] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [PWMTRV] - rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor [x]
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292088 2013-02-22] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [703888 2013-03-26] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-02-15] (Intel Corporation)
HKLM-x32\...\Run: [G Data AntiVirus Tray] - C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe [1444304 2013-03-22] (G Data Software AG)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-03-14] (Lenovo)
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-03-14] (Lenovo)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [245872 2013-02-28] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [201576 2013-02-28] (NVIDIA Corporation)
Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\PROGRAM FILES (X86)\SECUNIA\PSI\psi_tray.exe (Secunia)
Startup: C:\Users\unknownname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\unknownname\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.5&ts=1370172802305&tguid=46364-3869-1370172802305-CC7153E8B9F9386EA749066F975F8E04&q={searchTerms}
SearchScopes: HKCU - DefaultScope {EBE634C3-4A01-4CAC-8738-BA74F33108A4} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.5&ts=1370172802305&tguid=46364-3869-1370172802305-CC7153E8B9F9386EA749066F975F8E04&q={searchTerms}
SearchScopes: HKCU - {EBE634C3-4A01-4CAC-8738-BA74F33108A4} URL = hxxp://search.certified-toolbar.com?si=46364&st=bs&tid=3869&ver=3.5&ts=1370172802305&tguid=46364-3869-1370172802305-CC7153E8B9F9386EA749066F975F8E04&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: IePasswordManagerHelper Class - {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} - C:\Program Files\Lenovo\Password Manager\tvtpwm_ie_com.dll (Lenovo Group Limited)
BHO: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files\WOT\WOT.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft Web Test Recorder 10.0 Helper - {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} - C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll (Microsoft Corporation)
BHO-x32: No Name - {ba696155-d96e-4281-b467-0367a0456474} -  No File
BHO-x32: IePasswordManagerHelper Class - {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} - C:\Program Files (x86)\Lenovo\Password Manager\tvtpwm_ie_com.dll (Lenovo Group Limited)
BHO-x32: WOT Helper - {C920E44A-7F78-4E64-BDD7-A57026E7FEB7} - C:\Program Files (x86)\WOT\WOT.dll ()
BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Toolbar: HKLM-x32 - No Name - {ba696155-d96e-4281-b467-0367a0456474} -  No File
Toolbar: HKLM-x32 - WOT - {71576546-354D-41c9-AAE8-31F2EC22BF0D} - C:\Program Files (x86)\WOT\WOT.dll ()
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - WOT - {71576546-354D-41C9-AAE8-31F2EC22BF0D} - C:\Program Files\WOT\WOT.dll ()
Handler: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files\WOT\WOT.dll ()
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Handler-x32: wot - {C2A44D6B-CB9F-4663-88A6-DF2F26E4D952} - C:\Program Files (x86)\WOT\WOT.dll ()
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default
FF Homepage: about:newtab
FF Keyword.URL: https://www.google.de/search?ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:de:official&client=firefox-a&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: WOT - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: adblockpopups - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\adblockpopups@jessehakanen.net.xpi
FF Extension: No Name - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\{c36177c0-224a-11da-8cd6-0800200c9a91}.xpi
FF Extension: No Name - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\unknownname\AppData\Roaming\Mozilla\Firefox\Profiles\e3cv4ewy.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKCU\...\Firefox\Extensions: [{F74D5734-46F5-4B16-96F0-1E7FBF41B750}] C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension\2.0b12
FF Extension: ThinkVantage Password Manager - C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension\2.0b12

==================== Services (Whitelisted) =================

R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [1957840 2013-03-22] (G Data Software AG)
R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [635344 2013-02-25] (G Data Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe [2556384 2013-07-02] (G Data Software AG)
S3 DozeSvc; C:\Program Files (x86)\ThinkPad\Utilities\DZSVC64.EXE [320576 2012-09-24] (Lenovo.)
R2 FPLService; C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe [296808 2012-08-30] (AuthenTec, Inc)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation)
R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [2926672 2013-03-22] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [696808 2013-02-25] (G Data Software AG)
R2 GobiQDLService; C:\Program Files (x86)\Sierra Wireless Inc\Gobi\QDLService\GobiQDLService.exe [312688 2011-11-25] (Sierra Wireless, Inc.)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-02-15] (Intel Corporation)
R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [187760 2012-11-26] (Lenovo Group Limited)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1227800 2013-04-18] (Secunia)
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22376 2013-06-26] ()
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation)
R2 WMCoreService; C:\Program Files (x86)\Mobile Broadband drivers\WMCore\mini_WMCore.exe [689560 2012-10-18] (Ericsson AB)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3342640 2012-08-23] (Intel® Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [x]

==================== Drivers (Whitelisted) ====================

R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [163368 2012-04-01] (Broadcom Corporation.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-03-20] (DT Soft Ltd)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [60248 2013-06-12] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [130392 2013-07-22] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [62808 2013-06-03] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64856 2013-07-22] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [107128 2013-07-28] (G Data Software)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [107128 2013-07-28] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65368 2013-06-12] (G Data Software AG)
R3 LenovoRd; C:\Windows\System32\Drivers\LenovoRd.sys [118016 2009-05-11] (Lenovo)
R3 NETwNs64; C:\Windows\System32\DRIVERS\Netwsw00.sys [11525872 2013-02-27] (Intel Corporation)
R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [284448 2013-02-28] (NVIDIA Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-04-18] (Secunia)
S3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [44344 2012-10-18] (Synaptics Incorporated)
R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13128 2011-05-30] (Authentec Inc.)
R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [40248 2011-05-30] (Lenovo Information Product(ShenZhen China) Inc.)
R3 tvtvcamd; C:\Windows\System32\DRIVERS\tvtvcamd.sys [27432 2011-12-08] (ThinkVantage Communications Utility)
S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-26] (Microsoft Corporation)
S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-26] (Microsoft Corporation)
S3 btwampfl; \??\C:\Windows\system32\drivers\btwampfl.sys [x]
S3 btwaudio; system32\drivers\btwaudio.sys [x]
S3 btwavdt; system32\drivers\btwavdt.sys [x]
S3 btwl2cap; system32\DRIVERS\btwl2cap.sys [x]
S3 btwrchid; system32\DRIVERS\btwrchid.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-02 19:22 - 2013-08-02 19:23 - 00001293 _____ C:\AdwCleaner[S5].txt
2013-08-02 18:52 - 2013-08-02 18:52 - 00001294 _____ C:\AdwCleaner[S4].txt
2013-08-02 18:50 - 2013-08-02 18:50 - 00666633 _____ C:\Users\unknownname\Desktop\adwcleaner(1).exe
2013-08-02 09:28 - 2013-08-02 09:30 - 00000000 ____D C:\32788R22FWJFW
2013-08-01 20:27 - 2013-08-02 09:22 - 00000000 ____D C:\Users\unknownname\Desktop\hitzler.Semantic_Web
2013-08-01 16:55 - 2013-08-01 16:55 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2013-07-31 10:29 - 2013-07-31 10:29 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\OpenOffice
2013-07-28 15:28 - 2013-07-28 15:36 - 00000000 ____D C:\Users\unknownname\Desktop\Restored Files
2013-07-28 15:17 - 2013-07-28 15:17 - 00676403 _____ ((c) Copyright 1999-2006 Smart PC Solutions, LLC             ) C:\Users\unknownname\Downloads\flashrecovery.exe
2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\UpdatusUser\Desktop\Click To Find and Fix PC Errors.lnk
2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\unknownname\Desktop\Click To Find and Fix PC Errors.lnk
2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\unknownname\Desktop\Click To Find and Fix PC Errors.lnk
2013-07-28 15:17 - 2013-07-28 15:17 - 00000000 ____D C:\Program Files (x86)\Smart Flash Recovery
2013-07-28 12:20 - 2013-07-28 12:20 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2013-07-28 12:14 - 2013-07-28 12:16 - 162401424 _____ C:\Users\unknownname\Downloads\Apache_OpenOffice_4.0.0_Win_x86_install_de.exe
2013-07-25 07:57 - 2013-07-25 08:29 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\FreeFileSync
2013-07-25 07:57 - 2013-07-25 07:57 - 00000000 ____D C:\Program Files\FreeFileSync
2013-07-19 09:51 - 2013-07-19 11:04 - 00012874 _____ C:\Users\unknownname\Downloads\#blatt11.v#
2013-07-19 08:41 - 2013-07-19 08:41 - 00012386 _____ C:\Users\unknownname\Downloads\blatt11.v
2013-07-18 09:27 - 2013-07-18 09:27 - 00008244 _____ C:\Users\unknownname\Downloads\ex11vorlage.v
2013-07-12 22:25 - 2013-07-12 22:28 - 00000000 ____D C:\Windows\system32\MRT
2013-07-12 10:35 - 2013-07-12 10:35 - 00023618 _____ C:\Users\Public\Documents\semprog.odt
2013-07-11 13:04 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-11 13:04 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-11 13:04 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-11 13:04 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-11 13:04 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-11 13:04 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-11 13:04 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-11 13:04 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-11 13:04 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-11 13:04 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-11 13:04 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-11 13:04 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-11 13:04 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-11 13:04 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 13:04 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 13:04 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-11 13:04 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 13:04 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-11 13:04 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-11 13:04 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-11 13:04 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 13:04 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-11 08:24 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-11 08:24 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-11 08:24 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-11 08:24 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-11 08:24 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-11 08:24 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-11 08:24 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-10 09:58 - 2013-07-10 09:59 - 15474652 _____ (The Git Development Community                               ) C:\Users\unknownname\Downloads\Git-1.8.3-preview20130601.exe
2013-07-10 09:56 - 2013-07-10 09:56 - 00000000 ____D C:\Users\unknownname\.ssh
2013-07-10 09:55 - 2013-07-10 09:57 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\GitHub
2013-07-10 09:55 - 2013-07-10 09:57 - 00000000 ____D C:\Users\unknownname\AppData\Local\GitHub
2013-07-10 09:55 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\Documents\GitHub
2013-07-10 09:55 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
2013-07-10 09:51 - 2013-07-10 09:57 - 00000000 ____D C:\Users\unknownname\AppData\Local\Deployment
2013-07-10 09:51 - 2013-07-10 09:51 - 00715360 _____ () C:\Users\unknownname\Downloads\GitHubSetup(1).exe
2013-07-10 09:51 - 2013-07-10 09:51 - 00000000 ____D C:\Users\unknownname\AppData\Local\Apps\2.0
2013-07-09 19:56 - 2013-07-09 19:57 - 00001173 _____ C:\AdwCleaner[S3].txt
2013-07-09 13:45 - 2013-07-09 13:45 - 00000000 ____D C:\Windows\ERUNT
2013-07-09 13:41 - 2013-07-09 13:42 - 00001213 _____ C:\AdwCleaner[S2].txt
2013-07-09 13:38 - 2013-07-09 13:38 - 00552389 _____ (Oleg N. Scherbakov) C:\Users\unknownname\Desktop\JRT.exe
2013-07-09 13:21 - 2013-07-09 13:21 - 00048873 _____ C:\Users\unknownname\Documents\ComboFix2.txt
2013-07-09 12:50 - 2013-07-09 12:50 - 00000004 _____ C:\Users\unknownname\Desktop\unterdrücken.txt
2013-07-09 11:07 - 2013-07-09 11:07 - 00048813 _____ C:\ComboFix.txt
2013-07-09 09:41 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-07-09 09:41 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-07-09 09:41 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-07-09 09:41 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-07-09 09:41 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-07-09 09:41 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-07-09 09:41 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-07-09 09:41 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-07-09 09:39 - 2013-07-09 11:08 - 00000000 ____D C:\Qoobox
2013-07-09 09:38 - 2013-07-09 11:03 - 00000000 ____D C:\Windows\erdnt
2013-07-09 09:35 - 2013-08-02 09:29 - 05097176 ____R (Swearware) C:\Users\unknownname\Desktop\ComboFix.exe
2013-07-07 09:56 - 2013-07-07 10:02 - 00035057 _____ C:\Users\unknownname\Desktop\Addition.txt
2013-07-07 09:54 - 2013-07-07 09:54 - 00000000 ____D C:\FRST
2013-07-07 08:04 - 2013-07-07 08:56 - 00000296 _____ C:\Users\unknownname\Desktop\problem.txt
2013-07-04 07:54 - 2013-07-04 07:54 - 00262292 _____ C:\Windows\msxml4-KB2758694-deu.LOG
127

==================== One Month Modified Files and Folders =======

2013-08-03 09:14 - 2013-08-03 09:14 - 01781485 _____ (Farbar) C:\Users\unknownname\Desktop\FRST64.exe
2013-08-03 09:14 - 2012-12-18 02:33 - 01411395 _____ C:\Windows\WindowsUpdate.log
2013-08-03 09:14 - 2009-07-14 06:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-03 09:14 - 2009-07-14 06:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-03 09:07 - 2013-04-24 13:58 - 00000000 ___RD C:\Users\unknownname\Dropbox
2013-08-03 09:07 - 2013-04-24 13:53 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Dropbox
2013-08-03 09:06 - 2012-12-17 22:54 - 00000000 ____D C:\ProgramData\NVIDIA
2013-08-03 09:06 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-03 09:06 - 2009-07-14 06:51 - 00079850 _____ C:\Windows\setupact.log
2013-08-02 22:02 - 2012-12-17 21:03 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-02 19:23 - 2013-08-02 19:22 - 00001293 _____ C:\AdwCleaner[S5].txt
2013-08-02 18:52 - 2013-08-02 18:52 - 00001294 _____ C:\AdwCleaner[S4].txt
2013-08-02 18:50 - 2013-08-02 18:50 - 00666633 _____ C:\Users\unknownname\Desktop\adwcleaner(1).exe
2013-08-02 09:30 - 2013-08-02 09:28 - 00000000 ____D C:\32788R22FWJFW
2013-08-02 09:29 - 2013-07-09 09:35 - 05097176 ____R (Swearware) C:\Users\unknownname\Desktop\ComboFix.exe
2013-08-02 09:22 - 2013-08-01 20:27 - 00000000 ____D C:\Users\unknownname\Desktop\hitzler.Semantic_Web
2013-08-01 18:49 - 2012-12-19 23:20 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\LSC
2013-08-01 18:40 - 2013-06-03 11:37 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-08-01 17:13 - 2012-12-19 21:44 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\LSC
2013-08-01 16:55 - 2013-08-01 16:55 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2013-08-01 10:35 - 2013-04-23 12:43 - 00000000 ____D C:\Users\unknownname\Downloads\kommpar
2013-07-31 17:49 - 2013-03-20 21:47 - 00000000 ____D C:\Users\unknownname\Documents\Visual Studio 2012
2013-07-31 10:29 - 2013-07-31 10:29 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\OpenOffice
2013-07-30 17:13 - 2013-04-23 08:51 - 00000000 ____D C:\Users\unknownname\Downloads\semprog
2013-07-29 08:43 - 2009-07-14 06:45 - 00296888 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-28 16:14 - 2012-12-18 22:31 - 00065232 _____ C:\Users\unknownname\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-28 15:36 - 2013-07-28 15:28 - 00000000 ____D C:\Users\unknownname\Desktop\Restored Files
2013-07-28 15:17 - 2013-07-28 15:17 - 00676403 _____ ((c) Copyright 1999-2006 Smart PC Solutions, LLC             ) C:\Users\unknownname\Downloads\flashrecovery.exe
2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\UpdatusUser\Desktop\Click To Find and Fix PC Errors.lnk
2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\unknownname\Desktop\Click To Find and Fix PC Errors.lnk
2013-07-28 15:17 - 2013-07-28 15:17 - 00001903 _____ C:\Users\unknownname\Desktop\Click To Find and Fix PC Errors.lnk
2013-07-28 15:17 - 2013-07-28 15:17 - 00000000 ____D C:\Program Files (x86)\Smart Flash Recovery
2013-07-28 15:17 - 2012-12-19 21:53 - 00065232 _____ C:\Users\unknownname\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-28 15:17 - 2010-11-21 08:50 - 00699666 _____ C:\Windows\system32\perfh007.dat
2013-07-28 15:17 - 2010-11-21 08:50 - 00149774 _____ C:\Windows\system32\perfc007.dat
2013-07-28 15:17 - 2009-07-14 07:13 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-28 15:13 - 2013-02-12 15:26 - 00107128 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys
2013-07-28 15:13 - 2013-02-12 15:26 - 00016944 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys
2013-07-28 12:20 - 2013-07-28 12:20 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2013-07-28 12:16 - 2013-07-28 12:14 - 162401424 _____ C:\Users\unknownname\Downloads\Apache_OpenOffice_4.0.0_Win_x86_install_de.exe
2013-07-26 08:18 - 2010-11-21 05:47 - 00451066 _____ C:\Windows\PFRO.log
2013-07-25 08:29 - 2013-07-25 07:57 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\FreeFileSync
2013-07-25 07:57 - 2013-07-25 07:57 - 00000000 ____D C:\Program Files\FreeFileSync
2013-07-24 22:12 - 2012-12-17 21:03 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-24 22:12 - 2012-12-17 21:03 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-24 22:12 - 2012-12-17 21:03 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-07-24 22:11 - 2012-12-19 21:43 - 00000000 ____D C:\Users\unknownname\AppData\Local\Adobe
2013-07-24 22:08 - 2012-12-18 21:15 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Adobe
2013-07-23 08:15 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-22 20:42 - 2012-12-17 23:10 - 00130392 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys
2013-07-22 20:42 - 2012-12-17 23:10 - 00064856 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys
2013-07-21 09:30 - 2012-12-19 21:57 - 00000000 ____D C:\Windows\System32\Tasks\TVT
2013-07-21 09:30 - 2012-12-19 21:31 - 00000000 ____D C:\Program Files (x86)\Lenovo
2013-07-20 08:42 - 2013-05-30 16:07 - 00031351 _____ C:\Users\Public\Documents\kommpar.odt
2013-07-19 18:18 - 2013-05-23 21:07 - 00000000 ____D C:\Users\unknownname\Downloads\datamining
2013-07-19 11:04 - 2013-07-19 09:51 - 00012874 _____ C:\Users\unknownname\Downloads\#blatt11.v#
2013-07-19 08:41 - 2013-07-19 08:41 - 00012386 _____ C:\Users\unknownname\Downloads\blatt11.v
2013-07-18 15:40 - 2012-12-17 23:08 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Apple Computer
2013-07-18 09:27 - 2013-07-18 09:27 - 00008244 _____ C:\Users\unknownname\Downloads\ex11vorlage.v
2013-07-17 08:27 - 2013-02-14 16:27 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software
2013-07-16 13:30 - 2012-12-18 02:33 - 00000000 ____D C:\Users\unknownname
2013-07-16 12:53 - 2013-03-25 21:02 - 00000000 ____D C:\Users\unknownname\Documents\amos
2013-07-12 22:28 - 2013-07-12 22:25 - 00000000 ____D C:\Windows\system32\MRT
2013-07-12 12:23 - 2013-03-29 12:08 - 00000000 ____D C:\Users\unknownname\Documents\Krypto
2013-07-12 10:35 - 2013-07-12 10:35 - 00023618 _____ C:\Users\Public\Documents\semprog.odt
2013-07-11 15:26 - 2013-03-13 15:20 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-11 15:26 - 2013-03-13 15:20 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-11 15:26 - 2010-11-21 09:01 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-11 15:26 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 15:26 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-10 10:02 - 2013-04-24 07:36 - 00000000 ____D C:\Program Files (x86)\Git
2013-07-10 09:59 - 2013-07-10 09:58 - 15474652 _____ (The Git Development Community                               ) C:\Users\unknownname\Downloads\Git-1.8.3-preview20130601.exe
2013-07-10 09:57 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\GitHub
2013-07-10 09:57 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\AppData\Local\GitHub
2013-07-10 09:57 - 2013-07-10 09:51 - 00000000 ____D C:\Users\unknownname\AppData\Local\Deployment
2013-07-10 09:56 - 2013-07-10 09:56 - 00000000 ____D C:\Users\unknownname\.ssh
2013-07-10 09:55 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\Documents\GitHub
2013-07-10 09:55 - 2013-07-10 09:55 - 00000000 ____D C:\Users\unknownname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
2013-07-10 09:51 - 2013-07-10 09:51 - 00715360 _____ () C:\Users\unknownname\Downloads\GitHubSetup(1).exe
2013-07-10 09:51 - 2013-07-10 09:51 - 00000000 ____D C:\Users\unknownname\AppData\Local\Apps\2.0
2013-07-09 19:57 - 2013-07-09 19:56 - 00001173 _____ C:\AdwCleaner[S3].txt
2013-07-09 13:45 - 2013-07-09 13:45 - 00000000 ____D C:\Windows\ERUNT
2013-07-09 13:42 - 2013-07-09 13:41 - 00001213 _____ C:\AdwCleaner[S2].txt
2013-07-09 13:38 - 2013-07-09 13:38 - 00552389 _____ (Oleg N. Scherbakov) C:\Users\unknownname\Desktop\JRT.exe
2013-07-09 13:22 - 2013-06-02 08:36 - 00004128 _____ C:\Windows\System32\Tasks\Software Updater
2013-07-09 13:22 - 2013-06-02 08:36 - 00004106 _____ C:\Windows\System32\Tasks\Software Updater Ui
2013-07-09 13:21 - 2013-07-09 13:21 - 00048873 _____ C:\Users\unknownname\Documents\ComboFix2.txt
2013-07-09 12:50 - 2013-07-09 12:50 - 00000004 _____ C:\Users\unknownname\Desktop\unterdrücken.txt
2013-07-09 11:08 - 2013-07-09 09:39 - 00000000 ____D C:\Qoobox
2013-07-09 11:07 - 2013-07-09 11:07 - 00048813 _____ C:\ComboFix.txt
2013-07-09 11:07 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-07-09 11:04 - 2012-12-18 02:34 - 00000000 ___RD C:\Users\unknownname\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-07-09 11:03 - 2013-07-09 09:38 - 00000000 ____D C:\Windows\erdnt
2013-07-09 10:58 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-07-09 10:57 - 2009-07-14 04:34 - 17301504 _____ C:\Windows\system32\config\system.bak
2013-07-09 10:57 - 2009-07-14 04:34 - 112197632 _____ C:\Windows\system32\config\software.bak
2013-07-09 10:57 - 2009-07-14 04:34 - 05242880 _____ C:\Windows\system32\config\default.bak
2013-07-09 10:57 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\security.bak
2013-07-09 10:57 - 2009-07-14 04:34 - 00262144 _____ C:\Windows\system32\config\sam.bak
2013-07-07 10:02 - 2013-07-07 09:56 - 00035057 _____ C:\Users\unknownname\Desktop\Addition.txt
2013-07-07 09:54 - 2013-07-07 09:54 - 00000000 ____D C:\FRST
2013-07-07 08:56 - 2013-07-07 08:04 - 00000296 _____ C:\Users\unknownname\Desktop\problem.txt
2013-07-04 15:43 - 2013-06-25 14:32 - 00003163 _____ C:\Users\unknownname\weka.log
2013-07-04 07:54 - 2013-07-04 07:54 - 00262292 _____ C:\Windows\msxml4-KB2758694-deu.LOG

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-02 13:19

==================== End Of Log ============================
         
--- --- ---


Und die Addition.txt:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-08-2013
Ran by unknownname at 2013-08-03 09:18:28
Running from C:\Users\unknownname\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
 Tools for .Net 3.5 - DEU Lang Pack (x32 Version: 3.11.50727)
 Tools for .Net 3.5 (x32 Version: 3.11.50727)
Adobe AIR (x32 Version: 3.8.0.870)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
Anzeige am Bildschirm (Version: 7.06.00)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
Astroburn Lite (x32 Version: 1.7.0.0175)
AuthenTec TrueSuite (Version: 5.1.100.49)
Blend for Visual Studio 2012 (x32 Version: 5.0.30709.0)
Blend for Visual Studio 2012 DEU resources (x32 Version: 5.0.30709.0)
Blend for Visual Studio 2012 ENU resources (x32 Version: 5.0.30709.0)
Blend for Visual Studio Add-in for Adobe FXG Import (x32 Version: 1.0.40218.0)
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0)
Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0)
Bonjour (Version: 3.0.0.10)
Cisco AnyConnect Secure Mobility Client  (x32 Version: 3.1.03103)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.03103)
Cisco EAP-FAST Module (x32 Version: 2.2.14)
Cisco LEAP Module (x32 Version: 1.0.19)
Cisco PEAP Module (x32 Version: 1.1.6)
Coq Version 8.4pl2 (x32 Version: 8.4pl2)
DAEMON Tools Lite (x32 Version: 4.47.1.0333)
Devenv-Ressourcen für Microsoft Visual Studio 2012 (x32 Version: 11.0.50727)
Dolby Advanced Audio v2 (x32 Version: 7.2.8000.16)
Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4521.29298)
Dotfuscator and Analytics Community Edition Language Pack (x32 Version: 5.5.4521.29298)
Dropbox (HKCU Version: 2.0.22)
ElsterFormular (x32 Version: 14.0.0.10899)
Energie-Manager (x32 Version: 6.36)
Entity Framework Designer for Visual Studio 2012 - enu (x32 Version: 11.1.21009.00)
Entity Framework Designer für Visual Studio 2012 - DEU (x32 Version: 11.1.21009.00)
Erforderliche Komponenten für SSDT  (x32 Version: 11.0.2100.60)
Free Download Manager 3.9.2 (x32)
Free Driver Scout (Version: 1.0.0.111)
Free Driver Scout (x32 Version: 1.0.0.111)
Free System Utilities (x32 Version: 1.1.0.95)
Free SystemUtilities (x32 Version: 1.1.0.95)
FreeFileSync 5.16 (x32 Version: 5.16)
G Data InternetSecurity 2014 (x32 Version: 24.0.2.5)
Git version 1.8.3-preview20130601 (x32 Version: 1.8.3-preview20130601)
GitHub (HKCU Version: 1.0.52.0)
Haskell Platform 2012.4.0.0 (x32)
iCloud (Version: 2.1.2.8)
IIS 8.0 Express (Version: 8.0.1557)
IIS Express Application Compatibility Database for x64
IIS Express Application Compatibility Database for x86
ImgBurn (x32 Version: 2.5.7.0)
InstallShield 2012 Spring Limited Edition (x32 Version: 19.00.0000)
Integrated Camera Driver Installer Package Ver.1.2.1.18 (x32 Version: 1.2.1.18)
Intel PROSet Wireless
Intel(R) Control Center (x32 Version: 1.2.1.1010)
Intel(R) Management Engine Components (x32 Version: 9.0.0.1310)
Intel(R) Network Connections Drivers (Version: 16.8)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2843)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (Version: 15.3.0.0398)
Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.8.251)
Intel® PROSet/Wireless WiFi-Software (Version: 15.03.1000.1637)
Intel® Trusted Connect Service Client (Version: 1.27.757.1)
iTunes (Version: 11.0.4.4)
Java 7 Update 11 (x32 Version: 7.0.110)
Java 7 Update 25 (64-bit) (Version: 7.0.250)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Java SE Development Kit 7 Update 13 (64-bit) (Version: 1.7.0.130)
Java SE Development Kit 7 Update 17 (64-bit) (Version: 1.7.0.170)
Java SE Development Kit 7 Update 25 (64-bit) (Version: 1.7.0.250)
JavaScript Tooling (Version: 11.0.60315)
JavaScript Tooling (x32 Version: 11.0.60315)
JetBrains ReSharper 7.1.3 (x32 Version: 7.1.3000)
JetBrains TeamCity Addin 7.1 (x32 Version: 7.1.646)
Lenovo Patch Utility (x32 Version: 1.3.2.4)
Lenovo Patch Utility 64 bit (Version: 1.3.2.4)
Lenovo Power Management Driver (Version: 1.67.00.02)
Lenovo Solution Center (Version: 2.0.020.00)
Lenovo System Update (x32 Version: 5.02.0018)
LocalESPC (x32 Version: 8.59.25584)
LocalESPCui for de-de (x32 Version: 8.59.25584)
LocalESPCui for en-us (x32 Version: 8.59.25584)
MAGIX Speed burnR (x32 Version: 7.0.1.27)
MAGIX Webradio Recorder 5 5.0.0.326 (D) (x32 Version: 5.0.0.326)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (x32 Version: 4.5.50709)
Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (x32 Version: 4.5.50709)
Microsoft .NET Framework 4.5 SDK (x32 Version: 4.5.50709)
Microsoft ASP.NET MVC 3 - DEU (x32 Version: 3.0.20105.0)
Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update - DEU (x32 Version: 3.0.30710.0)
Microsoft ASP.NET MVC 3 - Visual Studio 2012 Tools Update (x32 Version: 3.0.30710.0)
Microsoft ASP.NET MVC 3 (x32 Version: 3.0.20105.0)
Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools - DEU (x32 Version: 4.1.20219.0)
Microsoft ASP.NET MVC 4 - Visual Studio 2012 Tools - ENU (x32 Version: 4.1.20219.0)
Microsoft ASP.NET MVC 4 Runtime - DEU (x32 Version: 4.0.20710.0)
Microsoft ASP.NET MVC 4 Runtime (x32 Version: 4.0.20710.0)
Microsoft ASP.NET Web Pages - DEU (x32 Version: 1.0.20105.0)
Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools - DEU (x32 Version: 1.0.20710.0)
Microsoft ASP.NET Web Pages - Visual Studio 2012 Tools (x32 Version: 1.0.20710.0)
Microsoft ASP.NET Web Pages (x32 Version: 1.0.20105.0)
Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools - DEU (x32 Version: 4.1.20219.0)
Microsoft ASP.NET Web Pages 2 - Visual Studio 2012 Tools - ENU (x32 Version: 4.1.20219.0)
Microsoft ASP.NET Web Pages 2 Runtime - DEU (x32 Version: 2.0.20710.0)
Microsoft ASP.NET Web Pages 2 Runtime (x32 Version: 2.0.20715.0)
Microsoft Expression Blend SDK for .NET 4 (x32 Version: 2.0.20525.0)
Microsoft Expression Blend SDK for Silverlight 4 (x32 Version: 2.0.20525.0)
Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727)
Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727)
Microsoft LightSwitch for Visual Studio 2012 Core (x32 Version: 11.0.50727)
Microsoft LightSwitch for Visual Studio 2012 CoreRes - ENU (x32 Version: 11.0.50727)
Microsoft LightSwitch for Visual Studio 2012 v3.0 Core (x32 Version: 11.0.60517)
Microsoft LightSwitch for Visual Studio 2012 v3.0 CoreRes - DEU (x32 Version: 11.0.60517)
Microsoft LightSwitch for Visual Studio 2012 v3.0 CoreRes - ENU (x32 Version: 11.0.60517)
Microsoft LightSwitch für Visual Studio 2012 CoreRes - DEU (x32 Version: 11.0.50727)
Microsoft NuGet - Visual Studio 2012 (x32 Version: 2.0.30625.9003)
Microsoft Portable Library Multi-Targeting Pack (x32 Version: 11.0.60418.17931)
Microsoft Portable Library Multi-Targeting Pack Language Pack - deu (x32 Version: 11.0.50709.17929)
Microsoft Portable Library Multi-Targeting Pack Language Pack - enu (x32 Version: 11.0.50709.17929)
Microsoft Report Viewer Add-On for Visual Studio 2012 (x32 Version: 11.1.2802.16)
Microsoft Report Viewer Add-On für Visual Studio 2012 (x32 Version: 11.1.2802.16)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft Silverlight 4 SDK - Deutsch (x32 Version: 4.0.60310.0)
Microsoft Silverlight 5 SDK - DEU (x32 Version: 5.0.61118.0)
Microsoft SQL Server 2012 Command Line Utilities  (Version: 11.0.2100.60)
Microsoft SQL Server 2012 Data-Tier App Framework  (Version: 11.0.2316.0)
Microsoft SQL Server 2012 Data-Tier App Framework  (x32 Version: 11.0.2316.0)
Microsoft SQL Server 2012 Express LocalDB  (Version: 11.0.2100.60)
Microsoft SQL Server 2012 Management Objects (x32 Version: 11.0.2100.60)
Microsoft SQL Server 2012 Management Objects (x64) (Version: 11.0.2100.60)
Microsoft SQL Server 2012 Native Client  (Version: 11.0.2100.60)
Microsoft SQL Server 2012 Transact-SQL Compiler Service  (Version: 11.0.2100.60)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (Version: 11.0.2100.60)
Microsoft SQL Server 2012 T-SQL Language Service  (x32 Version: 11.0.2100.60)
Microsoft SQL Server Compact 4.0 SP1 x64 DEU  (Version: 4.0.8876.1)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (Version: 4.0.8876.1)
Microsoft SQL Server Data Tools - DEU (11.1.20627.00) (x32 Version: 11.1.20627.00)
Microsoft SQL Server Data Tools - enu (11.1.20627.00) (x32 Version: 11.1.20627.00)
Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20627.00) (x32 Version: 11.1.20627.00)
Microsoft SQL Server Data Tools Build Utilities - enu (11.1.20627.00) (x32 Version: 11.1.20627.00)
Microsoft SQL Server System CLR Types (x32 Version: 10.50.1600.1)
Microsoft SQL Server System CLR Types (x64) (Version: 10.50.1600.1)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012  x64 Designtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 32bit Compilers - DEU Resources (x32 Version: 11.0.60610)
Microsoft Visual C++ 2012 32bit Compilers - ENU Resources (x32 Version: 11.0.60610)
Microsoft Visual C++ 2012 Compilers - DEU Resources (x32 Version: 11.0.60610)
Microsoft Visual C++ 2012 Compilers - ENU Resources (x32 Version: 11.0.60610)
Microsoft Visual C++ 2012 Compilers (x32 Version: 11.0.60610)
Microsoft Visual C++ 2012 Core Libraries (x32 Version: 11.0.51106)
Microsoft Visual C++ 2012 Extended Libraries (x32 Version: 11.0.60610)
Microsoft Visual C++ 2012 Microsoft Foundation Class Libraries (x32 Version: 11.0.60610)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610)
Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.60610 (x32 Version: 11.0.60610)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610)
Microsoft Visual C++ 2012 x86-x64 Compilers (x32 Version: 11.0.60610)
Microsoft Visual Studio 2010 Office Developer Tools (x64) (Version: 11.0.50727)
Microsoft Visual Studio 2010 Office Developer Tools (x64) Language Pack - DEU (Version: 11.0.50727)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40303)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40308)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.40303)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (Version: 10.0.40303)
Microsoft Visual Studio 2012 Devenv (x32 Version: 11.0.50727)
Microsoft Visual Studio 2012 Devenv Resources (x32 Version: 11.0.50727)
Microsoft Visual Studio 2012 IntelliTrace Core amd64 (Version: 11.0.60315)
Microsoft Visual Studio 2012 IntelliTrace Core x86 (x32 Version: 11.0.60315)
Microsoft Visual Studio 2012 IntelliTrace Front End x86 (x32 Version: 11.0.60315)
Microsoft Visual Studio 2012 IntelliTraceFrontEndLoc (x32 Version: 11.0.60315)
Microsoft Visual Studio 2012 IntelliTraceLoc (Version: 11.0.60315)
Microsoft Visual Studio 2012 IntelliTraceLoc (x32 Version: 11.0.60315)
Microsoft Visual Studio 2012 Language Pack - ENU (x32 Version: 11.0.50727.1)
Microsoft Visual Studio 2012 Performance Collection Tools - ENU (Version: 11.0.50727)
Microsoft Visual Studio 2012 Preparation (x32 Version: 11.0.50727)
Microsoft Visual Studio 2012 SharePoint Developer Tools (x32 Version: 11.0.50727)
Microsoft Visual Studio 2012 SharePoint Developer Tools DEU Language Pack (x32 Version: 11.0.50727)
Microsoft Visual Studio 2012 SharePoint Developer Tools ENU Language Pack (x32 Version: 11.0.50727)
Microsoft Visual Studio 2012 Shell (Minimum) (x32 Version: 11.0.50727)
Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies (x32 Version: 11.0.50727)
Microsoft Visual Studio 2012 Shell (Minimum) Resources (x32 Version: 11.0.50727)
Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen (x32 Version: 11.0.50727)
Microsoft Visual Studio 2012 Tools for SQL Server Compact 4.0 SP1 ENU (x32 Version: 4.0.8876.1)
Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU (x32 Version: 4.0.8876.1)
Microsoft Visual Studio 2012-Leistungserfassungstools - DEU (Version: 11.0.50727)
Microsoft Visual Studio 2012-Leistungserfassungstools (Version: 11.0.50727)
Microsoft Visual Studio 2012-Vorbereitung (x32 Version: 11.0.50727)
Microsoft Visual Studio Premium 2012 - DEU (x32 Version: 11.0.50727)
Microsoft Visual Studio Premium 2012 - ENU (x32 Version: 11.0.50727)
Microsoft Visual Studio Premium 2012 (x32 Version: 11.0.50727)
Microsoft Visual Studio Professional 2012 - DEU (x32 Version: 11.0.50727)
Microsoft Visual Studio Professional 2012 - ENU (x32 Version: 11.0.50727)
Microsoft Visual Studio Professional 2012 (x32 Version: 11.0.50727)
Microsoft Visual Studio Team Foundation Server 2012 Object Model (Version: 11.0.60610)
Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU (Version: 11.0.60610)
Microsoft Visual Studio Team Foundation Server 2012 Storyboarding (Version: 11.0.50727)
Microsoft Visual Studio Team Foundation Server 2012 Storyboarding Language Pack - DEU (Version: 11.0.50727)
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer (x32 Version: 11.0.50727)
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU (x32 Version: 11.0.50727)
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - ENU (x32 Version: 11.0.50727)
Microsoft Visual Studio Ultimate 2012 - DEU (x32 Version: 11.0.50727)
Microsoft Visual Studio Ultimate 2012 - ENU (x32 Version: 11.0.50727)
Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727)
Microsoft Visual Studio Ultimate 2012 (x32 Version: 11.0.50727.1)
Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core (x32 Version: 11.0.50727)
Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources (x32 Version: 11.0.50727)
Microsoft Visual Studio Ultimate 2012 XAML UI Designer enu Resources (x32 Version: 11.0.50727)
Microsoft Web Deploy 3.0 (Version: 3.1236.1631)
Microsoft Web Deploy dbSqlPackage Provider - DEU (x32 Version: 10.3.20225.0)
Microsoft Web Deploy dbSqlPackage Provider - enu (x32 Version: 10.3.20225.0)
Microsoft Web Developer Tools 2012.2 - Visual Studio 2012 - deu (x32 Version: 1.2.40308.0)
Microsoft Web Developer Tools 2012.2 - Visual Studio 2012 (x32 Version: 1.2.40308.0)
Microsoft Web Platform Installer 4.0 (Version: 4.0.1622)
Microsoft-System-CLR-Typen für SQL Server 2012 (x32 Version: 11.0.2100.60)
Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (Version: 11.0.2100.60)
Mobile Broadband Drivers (x32 Version: 7.2.3.2)
Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0)
Mozilla Maintenance Service (x32 Version: 22.0)
Mp3tag v2.54 (x32 Version: v2.54)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
Notepad++ (x32 Version: 6.3.2)
NUnit 2.6.2 (x32 Version: 2.6.2.12296)
NVIDIA 3D Vision Treiber 311.00 (Version: 311.00)
NVIDIA Grafiktreiber 311.00 (Version: 311.00)
NVIDIA HD-Audiotreiber 1.3.16.0 (Version: 1.3.16.0)
NVIDIA Install Application (Version: 2.1002.108.688)
NVIDIA nView 136.53 (Version: 136.53)
NVIDIA Optimus 1.11.3 (Version: 1.11.3)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1100)
NVIDIA Systemsteuerung 311.00 (Version: 311.00)
NVIDIA Update 1.11.3 (Version: 1.11.3)
NVIDIA Update Components (Version: 1.11.3)
OpenOffice 4.0.0 (x32 Version: 4.00.9702)
ovo Auto Scroll Utility (Version: 2.00)
Perforce Visual Components (Version: 131.61.1503)
PreEmptive Analytics Client German Language Pack (x32 Version: 1.0.2180.1)
PreEmptive Analytics Visual Studio Components (x32 Version: 1.0.2180.1)
Protege 3.4.8 (x32 Version: 1.0.0.0)
QuickTime (x32 Version: 7.74.80.86)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6886)
RICOH_Media_Driver_v2.14.18.01 (x32 Version: 2.14.18.01)
Secunia PSI (3.0.0.7009) (x32 Version: 3.0.0.7009)
Sierra Wireless QMI Lenovo Driver Package (x32 Version: 1.0.45.0)
Skype™ 6.5 (x32 Version: 6.5.158)
Smart Flash Recovery v. 2.0 (x32 Version: 2.0)
SpywareBlaster 5.0 (x32 Version: 5.0.0)
StreamTransport version: 1.0.2.2171 (x32)
Switch Sound File Converter (x32)
ThinkPad UltraNav Driver (Version: 16.2.19.7)
ThinkPad Wireless LAN Adapter Software (x32 Version: 1.00.0031.1)
ThinkVantage Access Connections (x32 Version: 5.97)
ThinkVantage Communications Utility (Version: 3.0.40.0)
ThinkVantage Fingerprint Software (Version: 5.9.8.7264)
ThinkVantage Password Manager (x32 Version: 4.10.20.0)
ThinkVantage System für aktiven Festplattenschutz (Version: 1.77.0.9)
TrueCrypt (x32 Version: 7.1a)
Update for  (KB2504637) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)
Update for Microsoft Visual Studio 2012 (KB2781514) (x32 Version: 11.0.51219)
Visual Studio 2012 Prerequisites - DEU Language Pack (Version: 11.0.50727)
Visual Studio 2012 Prerequisites - ENU Language Pack (Version: 11.0.50727)
Visual Studio 2012 Prerequisites (Version: 11.0.50727)
Visual Studio 2012 Update 3 (KB2707250) (x32 Version: 11.0.60610)
Visual Studio Extensions for Windows Library for JavaScript (x32 Version: 1.0.9201.20602)
VLC media player 2.0.7 (x32 Version: 2.0.7)
WavePad Sound Editor (x32)
WCF Data Services 5.0 (for OData v3) DEU Language Pack (x32 Version: 5.0.50628.0)
WCF Data Services 5.0 (for OData v3) Primary Components (x32 Version: 5.0.50628.0)
WCF Data Services Tools for Microsoft Visual Studio 2012 (x32 Version: 5.0.50710.0)
WCF Data Services Tools for Visual Studio 11 DEU Language Pack (x32 Version: 5.0.50710.0)
WCF RIA Services V1.0 SP2 (x32 Version: 4.1.61829.0)
Weka 3.6.9 (x32 Version: 3.6.9)
Windows App Certification Kit Native Components (Version: 8.59.29736)
Windows App Certification Kit x64 (x32 Version: 8.59.29750)
Windows Azure Tools for LightSwitch HTML Client for Visual Studio 2012 (x32 Version: 1.8.60301.1601)
Windows Azure Tools für LightSwitch HTML Client für Visual Studio 2012 (DEU) (x32 Version: 1.8.60301.1601)
Windows Runtime Intellisense Content - de-de (x32 Version: 8.59.25584)
Windows Runtime Intellisense Content - en-us (x32 Version: 8.59.25584)
Windows Software Development Kit (x32 Version: 8.59.25584)
Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584)
Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584)
Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.25584)
Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.25584)
Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.25584)
Windows XP Targeting with C++ (Version: 11.0.51106)
Windows XP Targeting with C++ (x32 Version: 11.0.51106)
WinPatrol (Version: 28.1.2013.0)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
WOT for Internet Explorer (Version: 12.8.2.0)

==================== Restore Points  =========================

22-07-2013 11:04:45 Geplanter Prüfpunkt
23-07-2013 06:19:07 Windows Update
26-07-2013 06:22:54 Windows Update
28-07-2013 10:17:42 OpenOffice 4.0.0 wird installiert
30-07-2013 06:10:41 Windows Update
02-08-2013 07:02:02 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2013-07-09 10:58 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {35B88FFE-29A9-4B59-BF70-7F10142358A3} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2013-06-26] ()
Task: {3AFABB19-B0DA-46BF-9A84-25D645784EA0} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {4C5048C3-E0DE-475B-B22B-E39FFF8EB650} - System32\Tasks\FreeDriverScout => C:\Program Files\Covus Freemium\Free Driver Scout\1Click.exe No File
Task: {5664DAD4-3366-4EDA-9497-A5D954262EE9} - System32\Tasks\Freemium1ClickMaint => C:\Users\unknownname\Downloads\1Click.exe No File
Task: {578E90FE-CE2E-4714-BC9A-6FF647FE07D5} - System32\Tasks\Software Updater Ui => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Ui.exe No File
Task: {6EBFA79C-425B-4383-94B9-7D38F8264125} - System32\Tasks\WPD\SqmUpload_S-1-5-21-1260871158-490153657-2048939727-1004 => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {7A5BCE17-FBAF-45D1-827B-27D43837DB7B} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-03-14] (Lenovo)
Task: {7B614847-D9E7-49F6-9604-64DDF030314F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-24] (Adobe Systems Incorporated)
Task: {84AC90CA-C832-429C-AFB1-F086F4AAD5F7} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {93072582-895F-4E70-BF3D-4134D37C384F} - System32\Tasks\Software Updater => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe No File
Task: {9D450B53-E0DB-4974-8293-98BD9BA35620} - System32\Tasks\NCH Software\WavePadReminder => C:\Program Files (x86)\NCH Software\WavePad\WavePad.exe [2012-12-14] (NCH Software)
Task: {A13B696C-2973-4DCE-8601-A4888770A00A} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {AA120A75-46DF-4CF9-96AB-B86410323489} - System32\Tasks\Express FilesUpdate => C:\Program Files (x86)\ExpressFiles\EFUpdater.exe No File
Task: {EAB23475-CFF3-4305-B8B4-D0ACFE78B286} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\lsc.exe [2013-03-14] ()
Task: {EC6C84A9-65C3-4C52-811F-A5877AB0F548} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2013-03-14] ()
Task: {FBF6D8D5-A0F5-40FE-AE0C-D84C39C7D348} - System32\Tasks\Browser Updater\Browser Updater => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {FE8CA6CE-2709-4DCC-AA94-60CDA04A8050} - System32\Tasks\NCH Software\SwitchReminder => C:\Program Files (x86)\NCH Software\Switch\Switch.exe [2012-09-07] (NCH Software)
Task: {FF008279-3B42-4C52-9C93-730470D95D66} - System32\Tasks\DSite => C:\Users\unknownname\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE No File
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Faulty Device Manager Devices =============

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/03/2013 09:06:36 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/02/2013 09:39:10 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/02/2013 07:25:11 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/02/2013 07:20:04 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/02/2013 06:53:53 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/02/2013 06:41:15 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 90080108

Error: (08/02/2013 09:21:29 AM) (Source: Customer Experience Improvement Program) (User: )
Description: 80004005

Error: (08/02/2013 09:17:33 AM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0

Error: (08/02/2013 09:17:33 AM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=25, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0

Error: (08/02/2013 09:17:33 AM) (Source: Microsoft-Windows-EapHost) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=17, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0


System errors:
=============
Error: (08/03/2013 09:11:48 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Definition Update for Windows Defender - KB915597 (Definition 1.155.1346.0)

Error: (08/03/2013 09:08:56 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (08/03/2013 09:08:56 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (08/02/2013 09:41:11 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (08/02/2013 09:41:11 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (08/02/2013 07:27:17 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069

Error: (08/02/2013 07:27:17 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (08/02/2013 07:23:39 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "G Data Personal Firewall" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (08/02/2013 07:23:39 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst G Data Personal Firewall erreicht.

Error: (08/02/2013 07:22:25 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1069


Microsoft Office Sessions:
=========================
Error: (08/03/2013 09:06:36 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/02/2013 09:39:10 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/02/2013 07:25:11 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/02/2013 07:20:04 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/02/2013 06:53:53 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/02/2013 06:41:15 PM) (Source: Customer Experience Improvement Program)(User: )
Description: 90080108

Error: (08/02/2013 09:21:29 AM) (Source: Customer Experience Improvement Program)(User: )
Description: 80004005

Error: (08/02/2013 09:17:33 AM) (Source: Microsoft-Windows-EapHost)(User: NT-AUTORITÄT)
Description: Eap method DLL path43900

Error: (08/02/2013 09:17:33 AM) (Source: Microsoft-Windows-EapHost)(User: NT-AUTORITÄT)
Description: Eap method DLL path25900

Error: (08/02/2013 09:17:33 AM) (Source: Microsoft-Windows-EapHost)(User: NT-AUTORITÄT)
Description: Eap method DLL path17900


CodeIntegrity Errors:
===================================
  Date: 2013-07-26 17:16:22.123
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-09 10:53:40.824
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-07-09 10:53:40.746
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-26 21:15:29.409
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-26 21:13:17.988
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-18 08:08:51.693
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-14 15:30:34.990
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-13 21:01:59.851
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-05-23 21:39:53.081
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-05-23 20:00:44.426
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 38%
Total physical RAM: 7889.63 MB
Available physical RAM: 4816.05 MB
Total Pagefile: 15777.44 MB
Available Pagefile: 12442.07 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:199.9 GB) (Free:55.44 GB) NTFS (Disk=0 Partition=2)
Drive d: () (Fixed) (Total:265.76 GB) (Free:256.74 GB) NTFS (Disk=0 Partition=3)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 000E3F0D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=200 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=266 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         
Schöne Grüße

unknownname

Antwort

Themen zu HomeTab, MPSigStub.exe und mpas-fe.exe
anmelden, anmeldung, anwendung, ausgehende, autostart, beim starten, c:\windows, download, files, firefox, folge, g-data, hallo zusammen, home, hometab, meldung, modul, mpas-fe.exe, mpsigstub.exe, nicht mehr, nichts, ordner, plug-in, registry, security, starten, system32, verbindung, windows




Ähnliche Themen: HomeTab, MPSigStub.exe und mpas-fe.exe


  1. Problem \HomeTab\TBUpdater.dll
    Plagegeister aller Art und deren Bekämpfung - 08.10.2015 (13)
  2. Meldung RunDLL Program Files (x86)\HomeTab\TBUpdater.dll
    Log-Analyse und Auswertung - 26.10.2014 (28)
  3. Windows 7: Beim Systemstart Fehlermeldung: ...\HomeTab\TBUdater.dll
    Log-Analyse und Auswertung - 06.10.2014 (15)
  4. C:\Program Files\HomeTab\TBUpdater.dll problem
    Plagegeister aller Art und deren Bekämpfung - 17.08.2014 (41)
  5. HomeTab, Simply Tec uä. / automatisches öffnen von Website
    Log-Analyse und Auswertung - 09.11.2013 (2)
  6. C:\Programm Files(x86)\HomeTab\TBUpdater.dll
    Plagegeister aller Art und deren Bekämpfung - 26.10.2013 (1)
  7. HomeTab - TBUpdater.dll - Fehlermeldung - PC mit XP
    Plagegeister aller Art und deren Bekämpfung - 22.10.2013 (23)
  8. Mpsigtub.exe und Mpas-fe_bd.exe auf PC
    Plagegeister aller Art und deren Bekämpfung - 21.10.2013 (11)
  9. Thema: C:\Program Files(x86)\HomeTab\TBupdter.dll
    Log-Analyse und Auswertung - 18.10.2013 (2)
  10. c:\program files(x86)\hometab\tbupdater.dll
    Log-Analyse und Auswertung - 05.10.2013 (14)
  11. HomeTab dll nicht vorhanden
    Log-Analyse und Auswertung - 07.09.2013 (3)
  12. C:\Program Files(x86)\HomeTab\TBUpdater.dll
    Plagegeister aller Art und deren Bekämpfung - 22.08.2013 (4)
  13. Windows 7: HomeTab und Certified Toolbar
    Log-Analyse und Auswertung - 16.08.2013 (11)
  14. Hometab\TBUpdater.dll - auch ich habe das Problem
    Plagegeister aller Art und deren Bekämpfung - 08.08.2013 (9)
  15. Toolbars, BrowserDefender, HomeTab u.a.
    Log-Analyse und Auswertung - 06.07.2013 (16)
  16. C:\Program Files(x86)\HomeTab\TBUpdater.dll
    Plagegeister aller Art und deren Bekämpfung - 22.06.2013 (7)

Zum Thema HomeTab, MPSigStub.exe und mpas-fe.exe - Hallo schrauber, sorry, dass ich mich erst jetzt wieder gemeldet habe, aber ich hatte ziemlichen Stress. Das mit AdwCleaner und JRT habe ich leider so verstanden, dass ich AdwCleaner nochmal - HomeTab, MPSigStub.exe und mpas-fe.exe...
Archiv
Du betrachtest: HomeTab, MPSigStub.exe und mpas-fe.exe auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.