ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Hallo,

Eset Scan:

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=fbf13c4b913fc2498044dcbcdeaf3e57
# engine=16559
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-01-08 11:39:58
# local_time=2014-01-08 12:39:58 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 95 10287 2599360 3064 0
# compatibility_mode=5893 16776574 100 94 433439 140812389 0 0
# scanned=219076
# found=1
# cleaned=0
# scan_time=4046
sh=25822A6F013285A78D62F1AB83F434F57FE6D23A ft=0 fh=0000000000000000 vn="JS/Exploit.Pdfka.QDW trojan" ac=I fn="C:\Users\Dominik\AppData\Local\Mozilla\Firefox\Profiles\vk2in1td.default\Cache\F\B1\AFE4Cd01"
         

Security Check:

 Results of screen317's Security Check version 0.99.78  
 Windows 7 Service Pack 1 x86 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Avira Desktop   
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Adobe Flash Player 	11.9.900.170  
 Adobe Reader XI  
 Mozilla Firefox (for.) 
 Google Chrome 31.0.1650.57  
 Google Chrome 31.0.1650.63  
````````Process Check: objlist.exe by Laurent````````  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

FRST CODE:


FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 08-01-2014
Ran by Dominik (administrator) on DOMINIK-PC on 08-01-2014 16:14:16
Running from C:\Users\Dominik\Desktop
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files\Gigabyte\EasySaver\essvr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Apple Computer, Inc.) C:\Program Files\QuickTime\qttask.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.0\bin\pg_ctl.exe
(Geek Software GmbH) C:\Program Files\PDF24\pdf24.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files\Pando Networks\Media Booster\PMB.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.0\bin\postgres.exe
(APN LLC.) C:\Users\Dominik\AppData\Local\VNT\vntldr.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.0\bin\postgres.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.0\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.0\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.0\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\9.0\bin\postgres.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(TechSmith Corporation) C:\Program Files\TechSmith\Jing\Jing.exe
(Eastman Kodak Company) C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [STCAgent] - "C:\Program Files\Splashtop\Splashtop Connect IE\STCAgent.exe"
HKLM\...\Run: [ZyngaGamesAgent] - "C:\Program Files\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe"
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10025576 2011-02-24] (Realtek Semiconductor)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-08-27] (Apple Inc.)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\qttask.exe [282624 2006-09-01] (Apple Computer, Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [421776 2012-09-09] (Apple Inc.)
HKLM\...\Run: [PrivitizeVPN] - C:\Program Files\PrivitizeVPN\PrivitizeVPN.exe [196784 2013-03-26] (OOO Industry)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [PDFPrint] - C:\Program Files\PDF24\pdf24.exe [186408 2013-12-12] (Geek Software GmbH)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [VNT] - C:\Program Files\VNT\vntldr.exe [202192 2013-12-20] (APN LLC.)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files\Pando Networks\Media Booster\PMB.exe [3093624 2012-10-24] ()
HKCU\...\Run: [Jing] - C:\Program Files\TechSmith\Jing\Jing.exe [2909640 2013-01-07] (TechSmith Corporation)
HKCU\...\Run: [DriverTurbo] - C:\Program Files\DriverTurbo\DriverTurbo.exe [4803688 2013-04-09] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x97C4DAC9CC88CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {B310399E-2342-461e-B54E-D312F4C19E7F} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBDSV
SearchScopes: HKCU - {D19376A2-16FD-422C-A5F6-6ED47A355406} URL = hxxp://www.bing.com/search?q={searchTerms}&form=SPLBR1&pc=SPLH
SearchScopes: HKCU - {ED1495F8-F52D-4367-95FF-B2D8C57EAAFD} URL = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A7941509802&ie=UTF-8&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A7941509802&q={searchTerms}
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Dominik\AppData\Roaming\Mozilla\Firefox\Profiles\vk2in1td.default
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", "");
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM\...\Firefox\Extensions: [{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}] - C:\Program Files\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}
FF HKLM\...\Firefox\Extensions: [{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}] - C:\Program Files\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}
FF HKLM\...\Firefox\Extensions: [{d9284e50-81fc-11da-a72b-0800200c9a66}] - C:\Program Files\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}

Chrome: 
=======
CHR HomePage: hxxp://searchou.com/?affil=7&uid=4727755b-962d-11e2-86f3-50e549535116
CHR RestoreOnStartup: ""
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (QuickTime Plug-in 7.1.3) - C:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1.3) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1.3) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1.3) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1.3) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1.3) - C:\Program Files\QuickTime\plugins\npqtplugin6.dll (Apple Computer, Inc.)
CHR Plugin: (QuickTime Plug-in 7.1.3) - C:\Program Files\QuickTime\plugins\npqtplugin7.dll (Apple Computer, Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Pando Web Plugin) - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (iTunes Application Detector) - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Extension: (AdBlock) - C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0
CHR Extension: (Google Wallet) - C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pcoohmdcpejoeggdnihdfhohjgdbllgm\30.1_0
CHR Extension: (Bitdefender QuickScan) - C:\Users\Dominik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie\0.9.9.131_0
CHR HKLM\...\Chrome\Extension: [pcoohmdcpejoeggdnihdfhohjgdbllgm] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7C\CRX\ToolbarCR.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

S2 8ffb8f2d; C:\ProgramData\Win sys filter\WinsysfilterSvc.dll [180048 2013-12-28] ()
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
S3 CGVPNCliSrvc; C:\Program Files\CyberGhost VPN\CGVPNCliService.exe [2438696 2012-04-26] (mobile concepts GmbH)
R2 ES lite Service; C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE [68136 2009-08-24] ()
R2 postgresql-9.0; C:/Program Files/PostgreSQL/9.0/bin/pg_ctl.exe runservice -N "postgresql-9.0" -D "C:/Program Files/PostgreSQL/9.0/data" -w [x]
S2 WCUService_STC_FF; C:\Program Files\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe [x]

==================== Drivers (Whitelisted) ====================

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [18544 2011-01-10] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [69240 2013-12-09] (Avira Operations GmbH & Co. KG)
R3 EtronHub3; C:\Windows\System32\Drivers\EtronHub3.sys [33152 2011-03-07] (Etron Technology Inc)
R3 EtronXHCI; C:\Windows\System32\Drivers\EtronXHCI.sys [52992 2011-03-07] (Etron Technology Inc)
R3 gdrv; C:\Windows\gdrv.sys [17488 2014-01-08] (Windows (R) 2000 DDK provider)
R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [40136 2013-02-22] (AnchorFree Inc.)
S3 rzdaendpt; C:\Windows\System32\DRIVERS\rzdaendpt.sys [22400 2012-08-17] (Razer USA Ltd)
S3 rzudd; C:\Windows\System32\DRIVERS\rzudd.sys [91776 2012-08-17] (Razer USA Ltd)
S3 rzvkeyboard; C:\Windows\System32\DRIVERS\rzvkeyboard.sys [19840 2012-08-17] (Razer USA Ltd)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-12-09] (Avira GmbH)
R3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [26624 2011-12-15] (The OpenVPN Project)
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [37064 2013-02-22] (Anchorfree Inc.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 Bulk1528; System32\Drivers\Bulk1528.sys [x]
S2 Ca1528av; System32\Drivers\Ca1528av.sys [x]
S3 catchme; \??\C:\Users\Dominik\AppData\Local\Temp\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-08 16:14 - 2014-01-08 16:14 - 00015856 _____ C:\Users\Dominik\Desktop\FRST.txt
2014-01-08 16:14 - 2014-01-08 16:14 - 00000000 ____D C:\Users\Dominik\Desktop\FRST-OlderVersion
2014-01-08 11:55 - 2014-01-08 11:55 - 00000000 ____D C:\Users\Dominik\Desktop\deck
2014-01-08 11:43 - 2014-01-08 11:43 - 00003693 _____ C:\Users\Dominik\Desktop\launcher.conf
2014-01-08 11:30 - 2014-01-08 11:30 - 00000000 ____D C:\Program Files\ESET
2014-01-08 11:29 - 2014-01-08 11:29 - 00987410 _____ C:\Users\Dominik\Desktop\SecurityCheck.exe
2014-01-08 11:21 - 2014-01-08 11:21 - 02347384 _____ (ESET) C:\Users\Dominik\Desktop\esetsmartinstaller_enu.exe
2014-01-07 13:44 - 2014-01-07 13:44 - 00000000 ____D C:\Windows\ERUNT
2014-01-07 13:34 - 2014-01-07 13:41 - 00000000 ____D C:\AdwCleaner
2014-01-07 13:10 - 2014-01-07 13:10 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Malwarebytes
2014-01-07 13:10 - 2014-01-07 13:10 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-07 13:10 - 2014-01-07 13:10 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2014-01-07 13:10 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-07 01:24 - 2014-01-07 01:25 - 00000000 ____D C:\Users\Dominik\Desktop\script
2014-01-06 16:34 - 2014-01-06 16:34 - 00071905 _____ C:\ComboFix.txt
2014-01-06 16:01 - 2014-01-06 16:34 - 00000000 ____D C:\Qoobox
2014-01-06 16:01 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2014-01-06 16:01 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2014-01-06 16:01 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-01-06 16:01 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-01-06 16:01 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-01-06 16:01 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2014-01-06 16:01 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2014-01-06 16:01 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2014-01-06 16:00 - 2014-01-06 16:26 - 00000000 ____D C:\Windows\erdnt
2014-01-06 15:14 - 2014-01-08 16:14 - 00000000 ____D C:\FRST
2014-01-06 15:13 - 2014-01-08 16:14 - 01065719 _____ (Farbar) C:\Users\Dominik\Desktop\FRST.exe
2014-01-06 15:13 - 2014-01-06 15:13 - 00000000 _____ C:\Users\Dominik\defogger_reenable
2014-01-06 15:12 - 2014-01-06 15:22 - 00000000 ____D C:\Users\Dominik\Desktop\13ja
2014-01-04 15:23 - 2014-01-04 15:23 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Avira
2014-01-04 15:23 - 2014-01-04 15:23 - 00000000 ____D C:\Users\Dominik\AppData\Local\VNT
2014-01-04 15:23 - 2014-01-04 15:23 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2014-01-04 15:23 - 2014-01-04 15:23 - 00000000 ____D C:\Program Files\VNT
2014-01-04 15:23 - 2014-01-04 15:23 - 00000000 ____D C:\Program Files\AskPartnerNetwork
2014-01-04 15:22 - 2014-01-04 15:22 - 00002012 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2014-01-04 15:21 - 2014-01-04 15:21 - 00000000 ____D C:\ProgramData\Avira
2014-01-04 15:21 - 2014-01-04 15:21 - 00000000 ____D C:\Program Files\Avira
2014-01-04 15:21 - 2013-12-09 11:37 - 00135648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-01-04 15:21 - 2013-12-09 11:37 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-01-04 15:21 - 2013-12-09 11:37 - 00069240 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-01-04 15:21 - 2013-12-09 11:37 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-01-04 15:21 - 2013-12-09 11:37 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2014-01-04 15:18 - 2014-01-04 15:18 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\QuickScan
2014-01-02 16:53 - 2013-09-04 02:15 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-02 16:53 - 2013-09-04 02:14 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-02 16:53 - 2013-09-04 02:14 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-02 16:53 - 2013-09-04 02:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-02 16:53 - 2013-09-04 02:14 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-02 16:53 - 2013-09-04 02:14 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-02 16:53 - 2013-09-04 02:14 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-12-29 23:01 - 2014-01-07 13:27 - 00000000 ____D C:\ProgramData\SiaveNNewaApPiz
2013-12-29 23:01 - 2014-01-07 13:27 - 00000000 ____D C:\ProgramData\DownSave
2013-12-29 23:01 - 2013-12-29 23:01 - 00000000 ____D C:\ProgramData\lfilhkbhpohbpcookbpddcfagjolkmej
2013-12-29 23:01 - 2013-12-29 23:01 - 00000000 ____D C:\ProgramData\6a0d3bb44b27cea8
2013-12-28 20:22 - 2013-12-28 20:22 - 00000000 ____D C:\ProgramData\Win sys filter
2013-12-22 02:02 - 2013-12-22 02:02 - 00000000 ____D C:\Program Files\SPCA1528
2013-12-22 02:02 - 2008-09-24 11:05 - 00014115 _____ C:\Windows\twspmm.ini
2013-12-22 02:02 - 2008-08-30 08:39 - 00005860 _____ C:\Windows\twspmm.src
2013-12-21 22:32 - 2014-01-08 11:50 - 00000000 ____D C:\Program Files\DevPro
2013-12-21 22:19 - 2014-01-08 12:00 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\YGOPro DevPro
2013-12-21 22:19 - 2013-12-21 22:19 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\DevPro, LLC
2013-12-21 21:11 - 2013-12-21 21:12 - 00000000 ____D C:\Program Files\Windows Live
2013-12-16 13:58 - 2013-12-16 13:58 - 00000000 ____D C:\Users\Dominik\AppData\Local\PDF24
2013-12-16 13:57 - 2013-12-16 13:58 - 00000000 ____D C:\Program Files\PDF24
2013-12-11 13:21 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 13:21 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 13:21 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 13:21 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-11 13:21 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-11 13:21 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 13:21 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 13:21 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-11 13:21 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 13:21 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 13:21 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-11 13:21 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-11 13:21 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 13:21 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-11 13:21 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 13:21 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 13:21 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-11 13:21 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 13:21 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 13:19 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-11 13:19 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-11 10:55 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-11 10:55 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 10:54 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-11 10:54 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 10:54 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 10:54 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 10:54 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 10:54 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 10:54 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 10:54 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 10:54 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

==================== One Month Modified Files and Folders =======

2014-01-08 16:14 - 2014-01-08 16:14 - 00015856 _____ C:\Users\Dominik\Desktop\FRST.txt
2014-01-08 16:14 - 2014-01-08 16:14 - 00000000 ____D C:\Users\Dominik\Desktop\FRST-OlderVersion
2014-01-08 16:14 - 2014-01-06 15:14 - 00000000 ____D C:\FRST
2014-01-08 16:14 - 2014-01-06 15:13 - 01065719 _____ (Farbar) C:\Users\Dominik\Desktop\FRST.exe
2014-01-08 16:14 - 2011-10-12 12:02 - 00000000 ____D C:\Users\Dominik\AppData\Local\PMB Files
2014-01-08 16:12 - 2009-07-14 05:34 - 00013728 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-08 16:12 - 2009-07-14 05:34 - 00013728 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-08 16:08 - 2011-10-12 11:35 - 02031304 _____ C:\Windows\WindowsUpdate.log
2014-01-08 16:05 - 2011-10-12 11:37 - 00000144 _____ C:\service.log
2014-01-08 16:04 - 2013-03-26 23:30 - 00000378 ____H C:\Windows\Tasks\MagniPicUpdaterTask{19FF4358-31E8-43BE-8B93-570675C10B45}.job
2014-01-08 16:04 - 2013-02-22 22:49 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-08 16:04 - 2011-10-12 11:49 - 00017488 _____ (Windows (R) 2000 DDK provider) C:\Windows\gdrv.sys
2014-01-08 16:04 - 2011-10-12 11:48 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-08 16:04 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-08 16:04 - 2009-07-14 05:39 - 00159408 _____ C:\Windows\setupact.log
2014-01-08 12:18 - 2013-03-06 00:22 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-08 12:15 - 2013-02-22 22:49 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-08 12:00 - 2013-12-21 22:19 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\YGOPro DevPro
2014-01-08 11:55 - 2014-01-08 11:55 - 00000000 ____D C:\Users\Dominik\Desktop\deck
2014-01-08 11:50 - 2013-12-21 22:32 - 00000000 ____D C:\Program Files\DevPro
2014-01-08 11:43 - 2014-01-08 11:43 - 00003693 _____ C:\Users\Dominik\Desktop\launcher.conf
2014-01-08 11:36 - 2011-10-12 12:02 - 00000000 ____D C:\ProgramData\PMB Files
2014-01-08 11:30 - 2014-01-08 11:30 - 00000000 ____D C:\Program Files\ESET
2014-01-08 11:29 - 2014-01-08 11:29 - 00987410 _____ C:\Users\Dominik\Desktop\SecurityCheck.exe
2014-01-08 11:21 - 2014-01-08 11:21 - 02347384 _____ (ESET) C:\Users\Dominik\Desktop\esetsmartinstaller_enu.exe
2014-01-07 13:44 - 2014-01-07 13:44 - 00000000 ____D C:\Windows\ERUNT
2014-01-07 13:41 - 2014-01-07 13:34 - 00000000 ____D C:\AdwCleaner
2014-01-07 13:29 - 2011-10-12 12:29 - 00284736 _____ C:\Windows\PFRO.log
2014-01-07 13:29 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\L2Schemas
2014-01-07 13:27 - 2013-12-29 23:01 - 00000000 ____D C:\ProgramData\SiaveNNewaApPiz
2014-01-07 13:27 - 2013-12-29 23:01 - 00000000 ____D C:\ProgramData\DownSave
2014-01-07 13:10 - 2014-01-07 13:10 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Malwarebytes
2014-01-07 13:10 - 2014-01-07 13:10 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-07 13:10 - 2014-01-07 13:10 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2014-01-07 01:25 - 2014-01-07 01:24 - 00000000 ____D C:\Users\Dominik\Desktop\script
2014-01-06 16:34 - 2014-01-06 16:34 - 00071905 _____ C:\ComboFix.txt
2014-01-06 16:34 - 2014-01-06 16:01 - 00000000 ____D C:\Qoobox
2014-01-06 16:34 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Default
2014-01-06 16:34 - 2009-07-14 03:37 - 00000000 ___RD C:\Users\Public
2014-01-06 16:26 - 2014-01-06 16:00 - 00000000 ____D C:\Windows\erdnt
2014-01-06 16:19 - 2009-07-14 03:04 - 00000215 _____ C:\Windows\system.ini
2014-01-06 15:22 - 2014-01-06 15:12 - 00000000 ____D C:\Users\Dominik\Desktop\13ja
2014-01-06 15:13 - 2014-01-06 15:13 - 00000000 _____ C:\Users\Dominik\defogger_reenable
2014-01-06 15:13 - 2011-10-12 11:35 - 00000000 ____D C:\Users\Dominik
2014-01-06 10:12 - 2012-01-02 02:53 - 00000000 ____D C:\Users\Dominik\Tracing
2014-01-04 15:28 - 2013-02-17 23:50 - 00000000 ____D C:\Users\Dominik\Desktop\domi
2014-01-04 15:23 - 2014-01-04 15:23 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Avira
2014-01-04 15:23 - 2014-01-04 15:23 - 00000000 ____D C:\Users\Dominik\AppData\Local\VNT
2014-01-04 15:23 - 2014-01-04 15:23 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2014-01-04 15:23 - 2014-01-04 15:23 - 00000000 ____D C:\Program Files\VNT
2014-01-04 15:23 - 2014-01-04 15:23 - 00000000 ____D C:\Program Files\AskPartnerNetwork
2014-01-04 15:22 - 2014-01-04 15:22 - 00002012 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2014-01-04 15:21 - 2014-01-04 15:21 - 00000000 ____D C:\ProgramData\Avira
2014-01-04 15:21 - 2014-01-04 15:21 - 00000000 ____D C:\Program Files\Avira
2014-01-04 15:18 - 2014-01-04 15:18 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\QuickScan
2014-01-01 15:07 - 2013-01-27 15:20 - 00000000 ____D C:\Users\postgres
2013-12-29 23:01 - 2013-12-29 23:01 - 00000000 ____D C:\ProgramData\lfilhkbhpohbpcookbpddcfagjolkmej
2013-12-29 23:01 - 2013-12-29 23:01 - 00000000 ____D C:\ProgramData\6a0d3bb44b27cea8
2013-12-28 20:22 - 2013-12-28 20:22 - 00000000 ____D C:\ProgramData\Win sys filter
2013-12-26 23:40 - 2011-10-12 11:45 - 01630080 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-25 22:03 - 2012-10-20 02:01 - 01208320 ___SH C:\Users\Dominik\Desktop\Thumbs.db
2013-12-23 23:31 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-12-22 02:02 - 2013-12-22 02:02 - 00000000 ____D C:\Program Files\SPCA1528
2013-12-22 02:02 - 2011-10-12 11:37 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-12-22 02:02 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\twain_32
2013-12-21 22:19 - 2013-12-21 22:19 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\DevPro, LLC
2013-12-21 21:12 - 2013-12-21 21:11 - 00000000 ____D C:\Program Files\Windows Live
2013-12-21 21:12 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-12-21 21:04 - 2011-12-29 14:17 - 00000000 ____D C:\Users\Dominik\AppData\Roaming\Skype
2013-12-16 13:58 - 2013-12-16 13:58 - 00000000 ____D C:\Users\Dominik\AppData\Local\PDF24
2013-12-16 13:58 - 2013-12-16 13:57 - 00000000 ____D C:\Program Files\PDF24
2013-12-14 14:07 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-12-11 16:34 - 2009-07-14 05:33 - 00330304 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-11 16:33 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-12-11 13:21 - 2013-08-14 16:25 - 00000000 ____D C:\Windows\system32\MRT
2013-12-11 13:21 - 2012-05-14 21:36 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-11 13:19 - 2011-10-12 12:11 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-11 12:18 - 2012-08-12 10:32 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-12-11 12:18 - 2011-10-12 11:52 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-12-10 17:15 - 2009-07-14 05:53 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-09 11:37 - 2014-01-04 15:21 - 00135648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-09 11:37 - 2014-01-04 15:21 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-09 11:37 - 2014-01-04 15:21 - 00069240 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-09 11:37 - 2014-01-04 15:21 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-12-09 11:37 - 2014-01-04 15:21 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys

Some content of TEMP:
====================
C:\Users\Dominik\AppData\Local\temp\avgnt.exe
C:\Users\Dominik\AppData\Local\temp\ICSharpCode.SharpZipLib.dll
C:\Users\Dominik\AppData\Local\temp\YgoUpdater.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-01 07:35

==================== End Of Log ============================
         

--- --- ---


Immer wenn ich Googlechrome öffne lösche ich die Erweiterung, sollte ich dies vielleicht nicht tun, damit sie in den Scans auftaucht oder ist das egal ?

Vielen Dank nochmal...

VG

miiizo