Avira-Maleware-Fund "Adware/InstallCore.Gen7" habe mit FRST_32 logfile erstellt

anna_helpme

Avira-Maleware-Fund "Adware/InstallCore.Gen7"
habe in einem anderen Thema gelesen, daß mit FRST 32 ein logfile erstellt werden soll das habe ich nun gemacht und stelle beide logfiles rein.
Ich hoffe jemand kennt sich aus und kann mit weiterhelfen.!?!

can result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-09-2013 03
Ran by Andrea u Hans-jörg (administrator) on IVOIRE on 17-09-2013 10:44:53
Running from C:\Users\Andrea u Hans-jörg\Downloads
Microsoft® Windows Vista™ Home Premium (X86) OS Language: German Standard
Internet Explorer Version 7
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(Wsys Co., Ltd.) C:\ProgramData\eSafe\eGdpSvc.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Nero AG) C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Nero AG) C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
(Nero AG) C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
(ATI Technologies Inc.) C:\Windows\system32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\System32\wpcumi.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(SoftMaker Software GmbH) C:\Program Files\SoftMaker FreeOffice\Smash.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [1006264 2012-09-19] (Microsoft Corporation)
HKLM\...\Run: [WPCUMI] - C:\Windows\system32\WpcUmi.exe [176128 2006-11-02] (Microsoft Corporation)
HKLM\...\Run: [NeroFilterCheck] - C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [153136 2007-03-01] (Nero AG)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated)
HKLM\...\Run: [MSConfig] - C:\Windows\system32\msconfig.exe [222208 2006-11-02] (Microsoft Corporation)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-05] (Avira Operations GmbH & Co. KG)
HKLM\...\Policies\Explorer: [AllowLegacyWebView] 1
HKLM\...\Policies\Explorer: [AllowUnhashedWebView] 1

und der andere log
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 16-09-2013 03
Ran by Andrea u Hans-jörg at 2013-09-17 10:45:24
Running from C:\Users\Andrea u Hans-jörg\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

Activision(R) (Version: 1.00.0000)
Adobe Acrobat 5.0 (Version: 5.0)
Adobe Flash Player 11 Plugin (Version: 11.5.502.110)
Adobe Reader X (10.1.5) - Deutsch (Version: 10.1.5)
Atheros AR5007 Wireless LAN - USB
ATI Catalyst Install Manager (Version: 3.0.652.0)
Avira Free Antivirus (Version: 13.0.0.4052)
Blur(TM) (Version: 1.00.0000)
Brick-Force (Version: )
Canon iP4700 series Printer Driver
Cool & Quiet
Découvertes 3 Sprachtrainer Kommunikation Baden-Württemberg (Version: 1.00.000)
DIE SIEDLER - Aufstieg eines Königreichs (Version: 1.00.0000)
General Runtime Files for Nemetschek Allplan 2008 (Version: 1.5.1.0)
Google Talk Plugin (Version: 4.2.1.14031)
Hardlock Gerätetreiber
Internet Explorer Toolbar 4.6 by SweetPacks (Version: 4.6.0004)
Java 7 Update 7 (Version: 7.0.70)
Java Auto Updater (Version: 2.1.9.0)
KODAK Create@Home Software (für dm) (Version: 6.0.8392)
League of Legends (Version: 1.02.0000)
League of Legends (Version: 3.0.1)
LightScribe System Software 1.10.13.1 (Version: 1.10.13.1)
LyricsWoofer
Malwarebytes Anti-Malware Version 1.70.0.1100 (Version: 1.70.0.1100)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft Flight Simulator X (Version: 10.0.60905)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mozilla Firefox 23.0.1 (x86 de) (Version: 23.0.1)
Mozilla Maintenance Service (Version: 23.0.1)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML 4.0 SP2 Parser und SDK (Version: 4.20.9818.0)
Nemetschek Allplan 2008 (Version: 2008.0)
Nero 8 Essentials (Version: 8.10.112)
neroxml (Version: 1.0.0)