Windows 7 Starter: Avira Trojaner-Fund lässt sich nicht beseitigen (Atraps.Gen2)

vikingr55 · 04.09.2013, 17:51

Results.txt

Code:

ATTFilter

MiniToolBox by Farbar  Version: 13-07-2013
Ran by Jenny (administrator) on 03-09-2013 at 19:03:38
Running from "C:\Users\Jenny\Desktop"
Microsoft Windows 7 Starter  Service Pack 1 (X86)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows-IP-Konfiguration

Der DNS-Auflîsungscache wurde geleert.

========================= IE Proxy Settings: ============================== 

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ============================== 


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================

127.0.0.1       localhost

========================= IP Configuration: ================================

Broadcom 802.11n-Netzwerkadapter = Drahtlosnetzwerkverbindung (Connected)
Realtek PCIe FE Family Controller = LAN-Verbindung (Media disconnected)
Microsoft Virtual WiFi Miniport Adapter = Drahtlosnetzwerkverbindung 2 (Media disconnected)


# ----------------------------------
# IPv4-Konfiguration
# ----------------------------------
pushd interface ipv4

reset
set global icmpredirects=enabled


popd
# Ende der IPv4-Konfiguration



Windows-IP-Konfiguration

   Hostname  . . . . . . . . . . . . : Jenny-PC
   PrimÑres DNS-Suffix . . . . . . . : 
   Knotentyp . . . . . . . . . . . . : Hybrid
   IP-Routing aktiviert  . . . . . . : Nein
   WINS-Proxy aktiviert  . . . . . . : Nein

Drahtlos-LAN-Adapter Drahtlosnetzwerkverbindung 2:

   Medienstatus. . . . . . . . . . . : Medium getrennt
   Verbindungsspezifisches DNS-Suffix: 
   Beschreibung. . . . . . . . . . . : Microsoft Virtual WiFi Miniport Adapter
   Physikalische Adresse . . . . . . : 7C-E9-D3-50-38-86
   DHCP aktiviert. . . . . . . . . . : Ja
   Autokonfiguration aktiviert . . . : Ja

Drahtlos-LAN-Adapter Drahtlosnetzwerkverbindung:

   Verbindungsspezifisches DNS-Suffix: 
   Beschreibung. . . . . . . . . . . : Broadcom 802.11n-Netzwerkadapter
   Physikalische Adresse . . . . . . : 7C-E9-D3-50-38-86
   DHCP aktiviert. . . . . . . . . . : Ja
   Autokonfiguration aktiviert . . . : Ja
   Verbindungslokale IPv6-Adresse  . : fe80::80d8:d4a:25de:ba3d%13(Bevorzugt) 
   IPv4-Adresse  . . . . . . . . . . : 192.168.2.105(Bevorzugt) 
   Subnetzmaske  . . . . . . . . . . : 255.255.255.0
   Lease erhalten. . . . . . . . . . : Sonntag, 1. September 2013 11:09:41
   Lease lÑuft ab. . . . . . . . . . : Samstag, 11. Oktober 2149 01:32:42
   Standardgateway . . . . . . . . . : 192.168.2.1
   DHCP-Server . . . . . . . . . . . : 192.168.2.1
   DHCPv6-IAID . . . . . . . . . . . : 326953427
   DHCPv6-Client-DUID. . . . . . . . : 00-01-00-01-16-C4-B5-24-04-7D-7B-27-BB-43
   DNS-Server  . . . . . . . . . . . : 192.168.2.1
   NetBIOS Åber TCP/IP . . . . . . . : Aktiviert

Ethernet-Adapter LAN-Verbindung:

   Medienstatus. . . . . . . . . . . : Medium getrennt
   Verbindungsspezifisches DNS-Suffix: 
   Beschreibung. . . . . . . . . . . : Realtek PCIe FE Family Controller
   Physikalische Adresse . . . . . . : 04-7D-7B-27-BB-43
   DHCP aktiviert. . . . . . . . . . : Ja
   Autokonfiguration aktiviert . . . : Ja

Tunneladapter isatap.{DD5567C6-AE70-4742-B7FF-C8730C030591}:

   Medienstatus. . . . . . . . . . . : Medium getrennt
   Verbindungsspezifisches DNS-Suffix: 
   Beschreibung. . . . . . . . . . . : Microsoft-ISATAP-Adapter
   Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP aktiviert. . . . . . . . . . : Nein
   Autokonfiguration aktiviert . . . : Ja

Tunneladapter LAN-Verbindung* 2:

   Medienstatus. . . . . . . . . . . : Medium getrennt
   Verbindungsspezifisches DNS-Suffix: 
   Beschreibung. . . . . . . . . . . : Microsoft-6zu4-Adapter
   Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP aktiviert. . . . . . . . . . : Nein
   Autokonfiguration aktiviert . . . : Ja

Tunneladapter isatap.{BAB17182-9EB1-4344-9BA2-87D4FBED5324}:

   Medienstatus. . . . . . . . . . . : Medium getrennt
   Verbindungsspezifisches DNS-Suffix: 
   Beschreibung. . . . . . . . . . . : Microsoft-ISATAP-Adapter #2
   Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP aktiviert. . . . . . . . . . : Nein
   Autokonfiguration aktiviert . . . : Ja

Tunneladapter Teredo Tunneling Pseudo-Interface:

   Medienstatus. . . . . . . . . . . : Medium getrennt
   Verbindungsspezifisches DNS-Suffix: 
   Beschreibung. . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP aktiviert. . . . . . . . . . : Nein
   Autokonfiguration aktiviert . . . : Ja

Tunneladapter isatap.{E2C935F8-5204-4436-8E7A-6A6B6C4CE30B}:

   Medienstatus. . . . . . . . . . . : Medium getrennt
   Verbindungsspezifisches DNS-Suffix: 
   Beschreibung. . . . . . . . . . . : Microsoft-ISATAP-Adapter #3
   Physikalische Adresse . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP aktiviert. . . . . . . . . . : Nein
   Autokonfiguration aktiviert . . . : Ja
Server:  easy.box
Address:  192.168.2.1

Name:    google.com
Addresses:  2a00:1450:4001:c02::8a
	  173.194.70.113
	  173.194.70.138
	  173.194.70.139
	  173.194.70.100
	  173.194.70.101
	  173.194.70.102

Ping-Anforderung konnte Host "google.com" nicht finden. öberprÅfen Sie den Namen, und versuchen Sie es erneut.
Server:  easy.box
Address:  192.168.2.1

Name:    yahoo.com
Addresses:  206.190.36.45
	  98.138.253.109
	  98.139.183.24

Ping-Anforderung konnte Host "yahoo.com" nicht finden. öberprÅfen Sie den Namen, und versuchen Sie es erneut.

Ping wird ausgefÅhrt fÅr 127.0.0.1 mit 32 Bytes Daten:
Antwort von 127.0.0.1: Bytes=32 Zeit<1ms TTL=128
Antwort von 127.0.0.1: Bytes=32 Zeit<1ms TTL=128

Ping-Statistik fÅr 127.0.0.1:
    Pakete: Gesendet = 2, Empfangen = 2, Verloren = 0
    (0% Verlust),
Ca. Zeitangaben in Millisek.:
    Minimum = 0ms, Maximum = 0ms, Mittelwert = 0ms
===========================================================================
Schnittstellenliste
 16...7c e9 d3 50 38 86 ......Microsoft Virtual WiFi Miniport Adapter
 13...7c e9 d3 50 38 86 ......Broadcom 802.11n-Netzwerkadapter
 11...04 7d 7b 27 bb 43 ......Realtek PCIe FE Family Controller
  1...........................Software Loopback Interface 1
 17...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter
 12...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter
 18...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter #2
 14...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
 19...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter #3
===========================================================================

IPv4-Routentabelle
===========================================================================
Aktive Routen:
     Netzwerkziel    Netzwerkmaske          Gateway    Schnittstelle Metrik
          0.0.0.0          0.0.0.0      192.168.2.1    192.168.2.105     26
        127.0.0.0        255.0.0.0   Auf Verbindung         127.0.0.1    306
        127.0.0.1  255.255.255.255   Auf Verbindung         127.0.0.1    306
  127.255.255.255  255.255.255.255   Auf Verbindung         127.0.0.1    306
      192.168.2.0    255.255.255.0   Auf Verbindung     192.168.2.105    281
    192.168.2.105  255.255.255.255   Auf Verbindung     192.168.2.105    281
    192.168.2.255  255.255.255.255   Auf Verbindung     192.168.2.105    281
        224.0.0.0        240.0.0.0   Auf Verbindung         127.0.0.1    306
        224.0.0.0        240.0.0.0   Auf Verbindung     192.168.2.105    281
  255.255.255.255  255.255.255.255   Auf Verbindung         127.0.0.1    306
  255.255.255.255  255.255.255.255   Auf Verbindung     192.168.2.105    281
===========================================================================
StÑndige Routen:
  Keine

IPv6-Routentabelle
===========================================================================
Aktive Routen:
 If Metrik Netzwerkziel             Gateway
  1    306 ::1/128                  Auf Verbindung
 13    281 fe80::/64                Auf Verbindung
 13    281 fe80::80d8:d4a:25de:ba3d/128
                                    Auf Verbindung
  1    306 ff00::/8                 Auf Verbindung
 13    281 ff00::/8                 Auf Verbindung
===========================================================================
StÑndige Routen:
  Keine
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"

Catalog5 02 C:\Windows\system32\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 03 C:\Windows\system32\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 04 C:\Windows\system32\pnrpnsp.dll [65024] (Microsoft Corporation)
Catalog5 05 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog5 06 C:\Windows\system32\winrnr.dll [20992] (Microsoft Corporation)
Catalog5 07 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280] (Microsoft Corp.)
Catalog5 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280] (Microsoft Corp.)
Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Catalog9 01 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 02 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 03 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 04 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 05 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 06 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 07 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 08 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 09 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 10 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 11 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 12 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 13 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 14 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 15 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 16 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 17 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 18 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 19 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 20 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 21 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 22 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 23 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 24 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 25 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 26 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 27 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 28 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 29 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 30 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 31 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)
Catalog9 32 C:\Windows\system32\mswsock.dll [232448] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (09/03/2013 06:58:55 AM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.

Error: (09/01/2013 08:04:14 PM) (Source: ESENT) (User: )
Description: Catalog Database (1204) Catalog Database:  Bei ‹berpr¸fung der aus Datei "C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" bei Offset 2441216 (0x0000000000254000) (Datenbankseite Catalog Database0) f¸r 4096 (0x00001000) Bytes gelesenen Datenbankseite ist durch eine Inkonsistenz der Seitenpr¸fsumme ein Fehler aufgetreten. Die erwartete Pr¸fsumme war [e9963531eb34d7b9], die tats‰chliche Pr¸fsumme [0000025365502b28]. Fehler -1018 (0xfffffc06) bei Leseoperation. Wenn dieser Zustand andauert, stellen Sie die Datenbank aus einer vorherigen Sicherung wieder her. Dieses Problem ist vermutlich durch fehlerhafte Hardware bedingt. Wenden Sie sich f¸r weitere Unterst¸tzung bei der Diagnose des Problems an Ihren Hardwarehersteller.

Error: (09/01/2013 11:17:51 AM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.

Error: (09/01/2013 11:07:51 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/01/2013 10:54:29 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2013 07:05:10 PM) (Source: ESENT) (User: )
Description: Catalog Database (1208) Catalog Database:  Bei ‹berpr¸fung der aus Datei "C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" bei Offset 2441216 (0x0000000000254000) (Datenbankseite Catalog Database0) f¸r 4096 (0x00001000) Bytes gelesenen Datenbankseite ist durch eine Inkonsistenz der Seitenpr¸fsumme ein Fehler aufgetreten. Die erwartete Pr¸fsumme war [e9963531eb34d7b9], die tats‰chliche Pr¸fsumme [0000025365502b28]. Fehler -1018 (0xfffffc06) bei Leseoperation. Wenn dieser Zustand andauert, stellen Sie die Datenbank aus einer vorherigen Sicherung wieder her. Dieses Problem ist vermutlich durch fehlerhafte Hardware bedingt. Wenden Sie sich f¸r weitere Unterst¸tzung bei der Diagnose des Problems an Ihren Hardwarehersteller.

Error: (08/31/2013 07:00:39 PM) (Source: ESENT) (User: )
Description: Catalog Database (1208) Catalog Database:  Bei ‹berpr¸fung der aus Datei "C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb" bei Offset 2441216 (0x0000000000254000) (Datenbankseite Catalog Database0) f¸r 4096 (0x00001000) Bytes gelesenen Datenbankseite ist durch eine Inkonsistenz der Seitenpr¸fsumme ein Fehler aufgetreten. Die erwartete Pr¸fsumme war [e9963531eb34d7b9], die tats‰chliche Pr¸fsumme [0000025365502b28]. Fehler -1018 (0xfffffc06) bei Leseoperation. Wenn dieser Zustand andauert, stellen Sie die Datenbank aus einer vorherigen Sicherung wieder her. Dieses Problem ist vermutlich durch fehlerhafte Hardware bedingt. Wenden Sie sich f¸r weitere Unterst¸tzung bei der Diagnose des Problems an Ihren Hardwarehersteller.

Error: (08/31/2013 06:42:08 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.

Error: (08/31/2013 06:31:53 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2013 06:27:06 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (09/03/2013 00:13:59 AM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (09/01/2013 08:28:08 PM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (09/01/2013 08:04:50 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht mˆglich sind. Der Dienst wird mˆglicherweise nicht richtig funktionieren.

Error: (09/01/2013 07:56:01 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht mˆglich sind. Der Dienst wird mˆglicherweise nicht richtig funktionieren.

Error: (09/01/2013 07:48:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht mˆglich sind. Der Dienst wird mˆglicherweise nicht richtig funktionieren.

Error: (09/01/2013 11:08:56 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (09/01/2013 11:08:56 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Presentation Foundation-Schriftartcache 3.0.0.0 erreicht.

Error: (09/01/2013 11:08:22 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (09/01/2013 11:05:42 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abh‰ngig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (09/01/2013 11:05:42 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abh‰ngig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068


Microsoft Office Sessions:
=========================
Error: (09/03/2013 06:58:55 AM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.

Error: (09/01/2013 08:04:14 PM) (Source: ESENT)(User: )
Description: Catalog Database1204Catalog Database: C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb2441216 (0x0000000000254000)4096 (0x00001000)-1018 (0xfffffc06)[e9963531eb34d7b9][0000025365502b28]595 (0x253)

Error: (09/01/2013 11:17:51 AM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.

Error: (09/01/2013 11:07:51 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/01/2013 10:54:29 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2013 07:05:10 PM) (Source: ESENT)(User: )
Description: Catalog Database1208Catalog Database: C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb2441216 (0x0000000000254000)4096 (0x00001000)-1018 (0xfffffc06)[e9963531eb34d7b9][0000025365502b28]595 (0x253)

Error: (08/31/2013 07:00:39 PM) (Source: ESENT)(User: )
Description: Catalog Database1208Catalog Database: C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb2441216 (0x0000000000254000)4096 (0x00001000)-1018 (0xfffffc06)[e9963531eb34d7b9][0000025365502b28]595 (0x253)

Error: (08/31/2013 06:42:08 PM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.

Error: (08/31/2013 06:31:53 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/31/2013 06:27:06 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


=========================== Installed Programs ============================

???? ??? Windows Live (Version: 15.4.3502.0922)
???? Windows Live (Version: 15.4.3502.0922)
?????? ??????? ?? Windows Live (Version: 15.4.3502.0922)
???????? ?????????? Windows Live (Version: 15.4.3502.0922)
?????????? Windows Live (Version: 15.4.3502.0922)
??????????? ?? Windows Live (Version: 15.4.3502.0922)
32 Bit HP CIO Components Installer (Version: 6.1.1)
4500_Help (Version: 1.00.0000)
7-Zip 9.20 (Version: 9.20.00.0)
Adobe AIR (Version: 2.7.1.19610)
Adobe Community Help (Version: 3.2.1)
Adobe Community Help (Version: 3.2.1.650)
Adobe Flash Player 11 ActiveX (Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (Version: 11.8.800.94)
Adobe Photoshop Elements 9 (Version: 9.0)
Adobe Reader X (10.1.7) MUI (Version: 10.1.7)
Apple Application Support (Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (Version: 2.1.3.127)
Avira Free Antivirus (Version: 13.0.0.4052)
Bonjour (Version: 3.0.0.10)
bpd_scan (Version: 3.00.0000)
BPDSoftware (Version: 50.0.165.000)
BPDSoftware_Ini (Version: 1.00.0000)
BufferChm (Version: 130.0.331.000)
Bundled software uninstaller
Cockatrice
Cyberduck 4.2.1 (9350) (Version: 4.2.1 (9350))
D3DX10 (Version: 15.4.2368.0902)
Dropbox (Version: 2.0.22)
Elements 9 Organizer (Version: 9.0)
Elements STI Installer (Version: 1.0)
eReg (Version: 1.20.138.34)
Evernote v. 4.5.1 (Version: 4.5.1.5451)
Fotogalerija Windows Live (Version: 15.4.3502.0922)
Galeria de Fotografias do Windows Live (Version: 15.4.3502.0922)
GalerÌa fotogr·fica de Windows Live (Version: 15.4.3502.0922)
Galeria fotogr‡fica del Windows Live (Version: 15.4.3502.0922)
Galeria fotografii uslugi Windows Live (Version: 15.4.3502.0922)
Galerie de photos Windows Live (Version: 15.4.3502.0922)
Galerie foto Windows Live (Version: 15.4.3502.0922)
HP Officejet J4500 Series (Version: 13.0)
iCloud (Version: 2.1.2.8)
Identity Card (Version: 1.00.3501)
iFunbox (v2.6.2375.747), iFunbox DevTeam (Version: v2.6.2375.747)
Intel(R) Control Center (Version: 1.2.1.1007)
Intel(R) Graphics Media Accelerator Driver (Version: 8.14.8.1065)
Intel(R) Rapid Storage Technology (Version: 10.1.0.1008)
iTunes (Version: 11.0.4.4)
J4500 (Version: 50.0.165.000)
Java 7 Update 21 (Version: 7.0.210)
Java Auto Updater (Version: 2.1.9.5)
JDownloader 0.9 (Version: 0.9)
Joboshare iPhone iBooks Transfer (Version: 3.4.5.1204)
Junk Mail filter update (Version: 15.4.3502.0922)
Launch Manager (Version: 5.1.7)
Logitech SetPoint 6.32 (Version: 6.32.20)
Lyrmix
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
McAfee Security Scan Plus (Version: 3.0.318.3)
Mesh Runtime (Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Office 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (Version: 14.0.5128.5002)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft_VC80_CRT_x86 (Version: 8.0.50727.4053)
Microsoft_VC80_MFC_x86 (Version: 8.0.50727.4053)
Microsoft_VC80_MFCLOC_x86 (Version: 8.0.50727.4053)
Microsoft_VC90_CRT_x86 (Version: 1.00.0000)
mkv2vob (Version: 2.4.9)
Mozilla Firefox 15.0.1 (x86 de) (Version: 15.0.1)
Mozilla Maintenance Service (Version: 15.0.1)
MSVCRT (Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Nur Entfernen der CopyTrans Suite mˆglich (Version: 2.37)
Packard Bell Power Management (Version: 6.00.3008)
Packard Bell Recovery Management (Version: 5.00.3504)
Packard Bell ScreenSaver (Version: 1.1.0124.2011)
Packard Bell Updater (Version: 1.02.3500)
Poczta uslugi Windows Live (Version: 15.4.3502.0922)
Podstawowe programy Windows Live (Version: 15.4.3502.0922)
Poöta Windows Live (Version: 15.4.3502.0922)
ProductContext (Version: 50.0.165.000)
QuickTime (Version: 7.74.80.86)
Raccolta foto di Windows Live (Version: 15.4.3502.0922)
Realtek Ethernet Controller Driver (Version: 7.49.927.2011)
Realtek High Definition Audio Driver (Version: 6.0.1.6374)
Realtek PCIE Card Reader (Version: 6.1.7601.83)
S?????? f?t???af??? t?? Windows Live (Version: 15.4.3502.0922)
Scan (Version: 13.0.0.0)
Synaptics Pointing Device Driver (Version: 15.1.18.0)
Toolbox (Version: 130.0.648.000)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Video Web Camera (Version: 1.5.2108.00)
VLC media player 2.0.8 (Version: 2.0.8)
WebReg (Version: 130.0.132.017)
Windows Live ??? (Version: 15.4.3502.0922)
Windows Live ???? (Version: 15.4.3502.0922)
Windows Live Argazki Galeria (Version: 15.4.3502.0922)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3538.0513)
Windows Live FotogalÈria (Version: 15.4.3502.0922)
Windows Live Fotogalerie (Version: 15.4.3502.0922)
Windows Live Fotogalleri (Version: 15.4.3502.0922)
Windows Live Fotograf Galerisi (Version: 15.4.3502.0922)
Windows Live FotÛt·r (Version: 15.4.3502.0922)
Windows Live Galeria de Fotos (Version: 15.4.3502.0922)
Windows Live Galerija fotografija (Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live Mesh (Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live Temel ParÁalar (Version: 15.4.3502.0922)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
Windows Liven asennustyˆkalu (Version: 15.4.3502.0922)
Windows Liven s‰hkˆposti (Version: 15.4.3502.0922)
Windows Liven valokuvavalikoima (Version: 15.4.3502.0922)

========================= Memory info: ===================================

Percentage of memory in use: 70%
Total physical RAM: 1012.3 MB
Available physical RAM: 301.79 MB
Total Pagefile: 2036.3 MB
Available Pagefile: 642.21 MB
Total Virtual: 2047.88 MB
Available Virtual: 1939.5 MB

========================= Partitions: =====================================

1 Drive c: (Packard Bell) (Fixed) (Total:284.99 GB) (Free:170.36 GB) NTFS
2 Drive d: () (Removable) (Total:3.92 GB) (Free:1.81 GB) FAT32

========================= Users: ========================================

Benutzerkonten fÅr \\JENNY-PC

Administrator            Gast                     Jenny                    
Der Befehl wurde erfolgreich ausgefÅhrt.

========================= Minidump Files ==================================

No minidump file found


**** End of log ****

FRST.txt

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-08-2013 03
Ran by Jenny (administrator) on JENNY-PC on 03-09-2013 18:59:37
Running from C:\Users\Jenny\Dropbox\Dokumente
Microsoft Windows 7 Starter  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Adobe Systems Incorporated) c:\Program Files\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LMutilps32.exe
(Realsil Microelectronics Inc.) C:\Program Files\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LMworker.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Farbar) C:\Users\Jenny\Dropbox\Dokumente\FRST-1.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [GfxServiceInstall] - C:\Windows\system32\GfxCUIServiceInstall.vbs [131 2011-12-30] ()
HKLM\...\Run: [LManager] - C:\Program Files\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1934632 2010-10-08] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10082920 2011-05-18] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [497648 2010-07-29] (Adobe Systems Incorporated)
HKLM\...\Run: [Power Management] - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [715368 2011-08-02] (Acer Incorporated)
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1387288 2011-10-07] (Logitech, Inc.)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-02] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [X]
HKLM\...\Policies\Explorer: [NoDrives] 0
HKCU\...\Policies\Explorer: [NoDrives] 0
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files\Packard Bell\Screensaver\run_Packard Bell.exe [ 2010-07-29] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files\Packard Bell\Screensaver\run_Packard Bell.exe [ 2010-07-29] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Jenny\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://packardbell.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=APBTDF&pc=MAPB&src=IE-SearchBox
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=APBTDF&pc=MAPB&src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Lyrmix - {115b65d1-cd23-4411-8d8c-f8967d4f553c} - C:\Program Files\Lyrmix\131.dll (Lyrmix)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Winsock: Catalog5 01 %SystemRoot%\System32\mswsock.dll [232448] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Jenny\AppData\Roaming\Mozilla\Firefox\Profiles\lw94r33j.default
FF user.js: detected! => C:\Users\Jenny\AppData\Roaming\Mozilla\Firefox\Profiles\lw94r33j.default\user.js
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Jenny\AppData\Roaming\Mozilla\Firefox\Profiles\lw94r33j.default\searchplugins\sweetim.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
FF HKCU\...\Firefox\Extensions: [{ef7f760f-6a65-4dd9-8946-2f7e24e00c28}] C:\Program Files\Lyrmix\131.xpi
FF Extension: No Name - C:\Program Files\Lyrmix\131.xpi
FF StartMenuInternet: FIREFOX.EXE - C:\Programme\Mozilla Firefox\firefox.exe

========================== Services (Whitelisted) =================

R2 AdobeActiveFileMonitor9.0; c:\Program Files\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [169408 2010-09-30] (Adobe Systems Incorporated)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-09-02] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-02] (Avira Operations GmbH & Co. KG)
R2 IconMan_R; C:\Program Files\Realtek\Realtek PCIE Card Reader\RIconMan.exe [1755136 2011-03-07] (Realsil Microelectronics Inc.)
R2 Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [244624 2011-04-22] (Acer Incorporated)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-02] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-02] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-08-31] (Avira Operations GmbH & Co. KG)
R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)
R3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [30360 2011-09-02] (Logitech, Inc.)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\mbamswissarmy.sys [40776 2013-05-29] (Malwarebytes Corporation)
R3 RSPCIESTOR; C:\Windows\System32\DRIVERS\RtsPStor.sys [254056 2011-05-30] (Realtek Semiconductor Corp.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-08-31] (Avira GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R3 catchme; \??\C:\Users\Jenny\AppData\Local\Temp\catchme.sys [x]
U3 mbr; \??\C:\ComboFix\mbr.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-03 18:58 - 2013-09-03 18:44 - 00760937 _____ (Farbar) C:\Users\Jenny\Desktop\MiniToolBox.exe
2013-09-03 18:58 - 2013-09-03 18:44 - 00358571 _____ (Farbar) C:\Users\Jenny\Desktop\FSS.exe
2013-09-03 15:37 - 2013-09-03 15:37 - 95587704 _____ C:\Windows\system32\Ꮽ（k
2013-09-02 08:42 - 2013-09-02 08:42 - 00014420 _____ C:\Users\Jenny\Desktop\combofix2.txt
2013-09-01 20:11 - 2013-09-01 20:11 - 00014418 _____ C:\ComboFix.txt
2013-08-31 23:21 - 2013-09-02 15:37 - 00066144 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-08-31 19:16 - 2013-08-31 19:16 - 00017182 _____ C:\Users\Jenny\Desktop\combofix.txt
2013-08-31 17:47 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-08-31 17:47 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-08-31 17:47 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-08-31 17:47 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-08-31 17:47 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-08-31 17:47 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-08-31 17:47 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-08-31 17:47 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-08-31 17:45 - 2013-09-01 20:11 - 00000000 ____D C:\Qoobox
2013-08-31 17:44 - 2013-09-01 19:43 - 05115930 ____R (Swearware) C:\Users\Jenny\Desktop\ComboFix.exe
2013-08-31 17:44 - 2013-08-31 19:04 - 00000000 ____D C:\Windows\erdnt
2013-08-31 17:22 - 2013-08-31 17:23 - 00007612 _____ C:\Users\Jenny\Desktop\Ereignisse.txt.txt
2013-08-31 17:21 - 2013-08-31 17:21 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\Avira
2013-08-31 17:16 - 2013-08-31 17:16 - 00000000 ____D C:\ProgramData\APN
2013-08-31 17:14 - 2013-09-02 15:37 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-08-31 17:14 - 2013-09-02 15:37 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-08-31 17:14 - 2013-08-31 17:12 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-08-31 17:14 - 2013-08-31 17:12 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2013-08-31 17:13 - 2013-08-31 17:14 - 00000000 ____D C:\ProgramData\Avira
2013-08-31 17:13 - 2013-08-31 17:13 - 00000000 ____D C:\Program Files\Avira
2013-08-31 15:48 - 2013-08-31 15:48 - 00000000 ____D C:\FRST
2013-08-31 15:44 - 2013-08-31 15:44 - 00000000 _____ C:\Users\Jenny\defogger_reenable
2013-08-30 13:04 - 2013-08-30 13:04 - 94748418 _____ C:\Windows\system32\鞢皏Y
2013-08-29 21:17 - 2013-08-29 21:17 - 94663095 _____ C:\Windows\system32\뀁�]
2013-08-29 11:41 - 2013-08-29 11:41 - 00000000 ____D C:\Program Files\Lyrmix
2013-08-28 21:19 - 2013-08-28 21:19 - 101009872 _____ C:\Windows\system32\皵㧘b
2013-08-28 15:07 - 2012-07-05 12:36 - 681535488 _____ C:\Users\Jenny\Downloads\dexterbd_dl_s02e12.avi
2013-08-28 14:51 - 2012-07-05 11:25 - 681766912 _____ C:\Users\Jenny\Downloads\dexterbd_dl_s02e11.avi
2013-08-28 14:35 - 2012-07-05 10:14 - 681474048 _____ C:\Users\Jenny\Downloads\dexterbd_dl_s02e10.avi
2013-08-28 14:18 - 2012-07-05 08:59 - 681551872 _____ C:\Users\Jenny\Downloads\dexterbd_dl_s02e09.avi
2013-08-28 14:03 - 2012-07-05 07:50 - 681525248 _____ C:\Users\Jenny\Downloads\dexterbd_dl_s02e08.avi
2013-08-25 19:17 - 2013-08-25 19:17 - 100156396 _____ C:\Windows\system32\촙暇Y
2013-08-25 13:45 - 2013-08-16 11:36 - 00000000 ____D C:\Users\Jenny\Downloads\Dan.Brown.-.Inferno.Mp3.Vbr
2013-08-25 11:35 - 2013-08-23 05:41 - 00000000 ____D C:\Users\Jenny\Downloads\DEX.XVID.S07E10.GDR
2013-08-25 09:17 - 2012-02-02 22:35 - 1032504440 _____ C:\Users\Jenny\Downloads\Wag the Dog Wenn der Schwanz mit dem Hund wedelt.HQ.avi
2013-08-21 23:14 - 2013-08-22 13:16 - 99750289 _____ C:\Windows\system32\蓂滄s
2013-08-20 17:16 - 2013-08-20 17:16 - 99562272 _____ C:\Windows\system32\䗢뎫c
2013-08-16 10:10 - 2013-09-03 11:33 - 00000338 _____ C:\Windows\Tasks\Lyrmix Update.job
2013-08-16 03:10 - 2013-08-16 03:19 - 00000000 ____D C:\Windows\system32\MRT
2013-08-16 01:28 - 2013-08-16 01:28 - 00000000 ____D C:\Users\Jenny\Downloads\Body.of.Proof.S03E13.Die.letzte.Zeugin.GERMAN.DUBBED.WebHDRiP.XviD-SOF
2013-08-15 12:58 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-15 12:58 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-15 12:58 - 2013-07-09 06:50 - 00652800 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-15 12:58 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-15 12:58 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-15 12:58 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-15 12:58 - 2013-07-06 07:05 - 01293760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-15 12:58 - 2013-06-15 05:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-14 23:50 - 2013-08-19 17:47 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\WindSolutions
2013-08-14 23:50 - 2013-08-19 17:15 - 00000000 ____D C:\ProgramData\WindSolutions
2013-08-14 23:50 - 2013-08-14 23:50 - 04279392 _____ (WindSolutions) C:\Users\Jenny\Downloads\Install_CopyTrans_Suite.exe
2013-08-14 23:50 - 2013-08-14 23:50 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CopyTrans Suite
2013-08-13 18:28 - 2013-08-13 18:28 - 00000000 ____D C:\Users\Jenny\AppData\Local\Cockatrice
2013-08-13 18:19 - 2013-08-13 18:19 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cockatrice
2013-08-13 18:19 - 2013-08-13 18:19 - 00000000 ____D C:\Program Files\Cockatrice
2013-08-13 18:18 - 2013-08-13 18:19 - 13834479 _____ C:\Users\Jenny\Downloads\cockatrice_win32_20130509_git-d462870.exe
2013-08-12 21:06 - 2013-08-12 21:06 - 05102112 _____ C:\Users\Jenny\Downloads\WTH_0186_iOS.ipa
2013-08-12 21:03 - 2013-08-12 21:19 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\iFunbox_UserCache
2013-08-12 21:03 - 2013-08-12 21:03 - 00000000 ____D C:\Program Files\i-Funbox DevTeam
2013-08-12 21:00 - 2013-08-12 21:01 - 15043804 _____ (                                                            ) C:\Users\Jenny\Downloads\ifunbox_setup.exe
2013-08-12 19:36 - 2013-08-12 19:39 - 00000000 ____D C:\Users\Jenny\AppData\Local\libimobiledevice
2013-08-12 19:35 - 2013-08-12 19:35 - 00000000 __RSH C:\MSDOS.SYS
2013-08-12 19:35 - 2013-08-12 19:35 - 00000000 __RSH C:\IO.SYS
2013-08-12 19:09 - 2013-08-12 19:10 - 00137569 _____ C:\Users\Jenny\Downloads\evasi0n-win-1.5.3.zip
2013-08-12 01:57 - 2013-01-13 07:33 - 182403058 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e24.avi
2013-08-12 01:46 - 2013-01-05 16:53 - 182387774 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e23.avi
2013-08-12 01:35 - 2012-12-20 18:49 - 182386178 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e21.avi
2013-08-12 01:27 - 2012-12-29 17:50 - 182348596 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e22.avi
2013-08-12 01:08 - 2012-12-13 22:15 - 182227500 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e20.avi
2013-08-12 00:57 - 2013-08-01 01:05 - 205473198 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e19.avi
2013-08-12 00:45 - 2012-11-29 20:01 - 182464954 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e18.avi
2013-08-12 00:34 - 2012-11-21 23:33 - 182371694 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e17.avi
2013-08-12 00:23 - 2012-11-14 23:56 - 182335634 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e16.avi
2013-08-12 00:12 - 2012-11-07 22:26 - 182292008 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e15.avi
2013-08-12 00:01 - 2013-08-01 00:33 - 191252820 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e14.avi
2013-08-11 23:37 - 2012-10-18 01:17 - 182364968 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e12.avi
2013-08-11 23:24 - 2012-10-11 14:33 - 182301702 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e11.avi
2013-08-11 23:11 - 2013-07-29 08:07 - 201620374 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e10.avi
2013-08-11 22:58 - 2012-09-26 23:52 - 182340244 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e09.avi
2013-08-11 22:46 - 2012-09-21 16:59 - 182433820 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e08.avi
2013-08-11 22:35 - 2012-09-15 14:46 - 182297378 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e07rp.avi
2013-08-11 22:24 - 2012-09-06 14:41 - 182388466 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e06.avi
2013-08-11 22:13 - 2012-08-30 13:58 - 182319866 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e05.avi
2013-08-11 22:02 - 2012-08-24 13:42 - 182361922 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e04.avi
2013-08-11 21:51 - 2012-08-15 23:57 - 182268884 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e03.avi
2013-08-11 21:40 - 2012-08-09 12:01 - 182424090 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e02.avi
2013-08-11 21:30 - 2012-08-01 21:34 - 181856256 _____ C:\Users\Jenny\Downloads\idtv-parksandrecreation_s02e01.avi
2013-08-11 13:38 - 2013-08-11 13:38 - 00000000 ____D C:\Users\Jenny\Downloads\Papas 50.ter
2013-08-09 16:37 - 2013-08-09 16:38 - 00000000 ____D C:\ProgramData\VirtualizedApplications

==================== One Month Modified Files and Folders =======

2013-09-03 18:58 - 2010-11-20 23:01 - 01499844 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-03 18:45 - 2013-09-03 18:58 - 03268369 _____ C:\Users\Jenny\Desktop\tweaking.com_windows_repair_aio.zip
2013-09-03 18:44 - 2013-09-03 18:58 - 00760937 _____ (Farbar) C:\Users\Jenny\Desktop\MiniToolBox.exe
2013-09-03 18:44 - 2013-09-03 18:58 - 00358571 _____ (Farbar) C:\Users\Jenny\Desktop\FSS.exe
2013-09-03 18:09 - 2012-09-27 21:43 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-03 16:51 - 2009-07-14 06:39 - 00212842 _____ C:\Windows\setupact.log
2013-09-03 15:37 - 2013-09-03 15:37 - 95587704 _____ C:\Windows\system32\Ꮽ（k
2013-09-03 11:33 - 2013-08-16 10:10 - 00000338 _____ C:\Windows\Tasks\Lyrmix Update.job
2013-09-02 15:46 - 2012-02-09 00:43 - 01487475 _____ C:\Windows\WindowsUpdate.log
2013-09-02 15:37 - 2013-08-31 23:21 - 00066144 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-09-02 15:37 - 2013-08-31 17:14 - 00136672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-09-02 15:37 - 2013-08-31 17:14 - 00088840 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-09-02 08:42 - 2013-09-02 08:42 - 00014420 _____ C:\Users\Jenny\Desktop\combofix2.txt
2013-09-01 20:48 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\LogFiles
2013-09-01 20:11 - 2013-09-01 20:11 - 00014418 _____ C:\ComboFix.txt
2013-09-01 20:11 - 2013-08-31 17:45 - 00000000 ____D C:\Qoobox
2013-09-01 20:04 - 2009-07-14 04:04 - 00000215 _____ C:\Windows\system.ini
2013-09-01 19:43 - 2013-08-31 17:44 - 05115930 ____R (Swearware) C:\Users\Jenny\Desktop\ComboFix.exe
2013-09-01 11:15 - 2009-07-14 06:34 - 00016160 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-01 11:15 - 2009-07-14 06:34 - 00016160 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-01 11:10 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF
2013-09-01 11:08 - 2012-10-05 19:56 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\Dropbox
2013-09-01 11:07 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-01 10:44 - 2010-11-20 23:48 - 00823500 _____ C:\Windows\PFRO.log
2013-09-01 10:24 - 2012-09-30 20:10 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\vlc
2013-09-01 01:42 - 2013-07-14 20:44 - 00000000 ____D C:\Program Files\Google
2013-09-01 01:41 - 2013-07-14 20:43 - 00000000 ____D C:\Users\Jenny\AppData\Local\Google
2013-08-31 19:16 - 2013-08-31 19:16 - 00017182 _____ C:\Users\Jenny\Desktop\combofix.txt
2013-08-31 19:16 - 2009-07-14 04:37 - 00000000 __RHD C:\Users\Default
2013-08-31 19:16 - 2009-07-14 04:37 - 00000000 ___RD C:\Users\Public
2013-08-31 19:04 - 2013-08-31 17:44 - 00000000 ____D C:\Windows\erdnt
2013-08-31 17:45 - 2009-07-14 06:53 - 00032634 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-31 17:23 - 2013-08-31 17:22 - 00007612 _____ C:\Users\Jenny\Desktop\Ereignisse.txt.txt
2013-08-31 17:21 - 2013-08-31 17:21 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\Avira
2013-08-31 17:16 - 2013-08-31 17:16 - 00000000 ____D C:\ProgramData\APN
2013-08-31 17:14 - 2013-08-31 17:13 - 00000000 ____D C:\ProgramData\Avira
2013-08-31 17:13 - 2013-08-31 17:13 - 00000000 ____D C:\Program Files\Avira
2013-08-31 17:12 - 2013-08-31 17:14 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-08-31 17:12 - 2013-08-31 17:14 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2013-08-31 16:58 - 2012-10-05 20:01 - 00000000 ___RD C:\Users\Jenny\Dropbox
2013-08-31 15:48 - 2013-08-31 15:48 - 00000000 ____D C:\FRST
2013-08-31 15:44 - 2013-08-31 15:44 - 00000000 _____ C:\Users\Jenny\defogger_reenable
2013-08-31 15:44 - 2012-09-27 16:59 - 00000000 ____D C:\Users\Jenny
2013-08-31 14:40 - 2012-09-27 21:00 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-31 08:37 - 2012-11-24 18:32 - 00000000 ____D C:\Users\Jenny\AppData\Local\CrashDumps
2013-08-30 13:04 - 2013-08-30 13:04 - 94748418 _____ C:\Windows\system32\鞢皏Y
2013-08-29 21:17 - 2013-08-29 21:17 - 94663095 _____ C:\Windows\system32\뀁�]
2013-08-29 11:41 - 2013-08-29 11:41 - 00000000 ____D C:\Program Files\Lyrmix
2013-08-28 21:19 - 2013-08-28 21:19 - 101009872 _____ C:\Windows\system32\皵㧘b
2013-08-25 19:17 - 2013-08-25 19:17 - 100156396 _____ C:\Windows\system32\촙暇Y
2013-08-23 05:41 - 2013-08-25 11:35 - 00000000 ____D C:\Users\Jenny\Downloads\DEX.XVID.S07E10.GDR
2013-08-22 13:16 - 2013-08-21 23:14 - 99750289 _____ C:\Windows\system32\蓂滄s
2013-08-21 09:09 - 2012-09-27 21:43 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-08-21 09:09 - 2011-12-16 14:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-08-20 17:16 - 2013-08-20 17:16 - 99562272 _____ C:\Windows\system32\䗢뎫c
2013-08-19 17:47 - 2013-08-14 23:50 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\WindSolutions
2013-08-19 17:15 - 2013-08-14 23:50 - 00000000 ____D C:\ProgramData\WindSolutions
2013-08-16 11:36 - 2013-08-25 13:45 - 00000000 ____D C:\Users\Jenny\Downloads\Dan.Brown.-.Inferno.Mp3.Vbr
2013-08-16 04:16 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2013-08-16 03:36 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-08-16 03:29 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-08-16 03:19 - 2013-08-16 03:10 - 00000000 ____D C:\Windows\system32\MRT
2013-08-16 03:10 - 2012-09-29 09:08 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-16 01:28 - 2013-08-16 01:28 - 00000000 ____D C:\Users\Jenny\Downloads\Body.of.Proof.S03E13.Die.letzte.Zeugin.GERMAN.DUBBED.WebHDRiP.XviD-SOF
2013-08-14 23:50 - 2013-08-14 23:50 - 04279392 _____ (WindSolutions) C:\Users\Jenny\Downloads\Install_CopyTrans_Suite.exe
2013-08-14 23:50 - 2013-08-14 23:50 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CopyTrans Suite
2013-08-14 23:50 - 2012-09-27 17:02 - 00000000 ____D C:\Users\Jenny\AppData\Local\Adobe
2013-08-13 18:28 - 2013-08-13 18:28 - 00000000 ____D C:\Users\Jenny\AppData\Local\Cockatrice
2013-08-13 18:19 - 2013-08-13 18:19 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cockatrice
2013-08-13 18:19 - 2013-08-13 18:19 - 00000000 ____D C:\Program Files\Cockatrice
2013-08-13 18:19 - 2013-08-13 18:18 - 13834479 _____ C:\Users\Jenny\Downloads\cockatrice_win32_20130509_git-d462870.exe
2013-08-12 21:19 - 2013-08-12 21:03 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\iFunbox_UserCache
2013-08-12 21:06 - 2013-08-12 21:06 - 05102112 _____ C:\Users\Jenny\Downloads\WTH_0186_iOS.ipa
2013-08-12 21:03 - 2013-08-12 21:03 - 00000000 ____D C:\Program Files\i-Funbox DevTeam
2013-08-12 21:01 - 2013-08-12 21:00 - 15043804 _____ (                                                            ) C:\Users\Jenny\Downloads\ifunbox_setup.exe
2013-08-12 20:10 - 2011-12-16 13:26 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-08-12 19:39 - 2013-08-12 19:36 - 00000000 ____D C:\Users\Jenny\AppData\Local\libimobiledevice
2013-08-12 19:35 - 2013-08-12 19:35 - 00000000 __RSH C:\MSDOS.SYS
2013-08-12 19:35 - 2013-08-12 19:35 - 00000000 __RSH C:\IO.SYS
2013-08-12 19:10 - 2013-08-12 19:09 - 00137569 _____ C:\Users\Jenny\Downloads\evasi0n-win-1.5.3.zip
2013-08-11 20:51 - 2012-09-27 20:56 - 00016400 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2013-08-11 20:51 - 2012-09-27 20:56 - 00001018 _____ C:\Windows\LkmdfCoInst.log
2013-08-11 13:38 - 2013-08-11 13:38 - 00000000 ____D C:\Users\Jenny\Downloads\Papas 50.ter
2013-08-10 13:46 - 2013-07-31 08:50 - 00000000 ____D C:\Program Files\Microsoft Application Virtualization Client
2013-08-09 16:38 - 2013-08-09 16:37 - 00000000 ____D C:\ProgramData\VirtualizedApplications
2013-08-09 16:23 - 2013-07-31 08:53 - 00000000 ____D C:\Users\Jenny\AppData\Roaming\SoftGrid Client

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-01 00:29

==================== End Of Log ============================

Leider funktioniert nach wie vor nicht viel. Symbole sind wieder da in der Taskleiste, aber das Internet ist trotzdem dicht.

Windows 7 Starter: Avira Trojaner-Fund lässt sich nicht beseitigen (Atraps.Gen2)

Log-Analyse und Auswertung: Windows 7 Starter: Avira Trojaner-Fund lässt sich nicht beseitigen (Atraps.Gen2)

Windows 7 Starter: Avira Trojaner-Fund lässt sich nicht beseitigen (Atraps.Gen2)

Ähnliche Themen: Windows 7 Starter: Avira Trojaner-Fund lässt sich nicht beseitigen (Atraps.Gen2)