Windows7, Neuinstallation, unerwünschte Programme nicht löschbar

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:28-06-2014 02
Ran by Axel Wartburg (administrator) on AXELWARTBURG-PC on 02-07-2014 16:03:35
Running from C:\Users\Axel Wartburg\Downloads
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Realtek Semiconductor Corp.) C:\Windows\SOUNDMAN.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SoundMan] => C:\Windows\SOUNDMAN.EXE [604704 2009-04-14] (Realtek Semiconductor Corp.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-01] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [183376 2014-05-14] (Avira Operations GmbH & Co. KG)
HKU\.DEFAULT\...\Run: [Advanced SystemCare 7] => "C:\Program Files\IObit\Advanced SystemCare 7\ASCTray.exe" /Auto
HKU\S-1-5-21-2484145685-346988029-2140834265-1001\...\Policies\Explorer: [DisallowRun] 1
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://de.search.yahoo.com/?type=800236&fr=spigot-yhp-ie
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {77FE92FC-4266-43CB-BEB8-1BEA085DF78A} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=securitascout
SearchScopes: HKCU - {E30BF0B8-CF38-40A0-8AC1-1B008AFF65CE} URL = https://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=800236&p={searchTerms}
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: Sichere Suche
FF SearchEngineOrder.1: Sichere Suche
FF SelectedSearchEngine: Sichere Suche
FF Homepage: https://www.ecosia.org/|hxxp://www.giga.de/
FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=mcafee&type=A110DE0&p=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @videolan.org/vlc,version=2.1.3 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Axel Wartburg\AppData\Roaming\Mozilla\Firefox\Profiles\qpoy22qo.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-07-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-01] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [123984 2014-05-14] (Avira Operations GmbH & Co. KG)
S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2152736 2014-05-04] (IObit)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)

==================== Drivers (Whitelisted) ====================

R3 ALCXWDM; C:\Windows\System32\drivers\RTKVAC.SYS [4172832 2009-06-18] (Realtek Semiconductor Corp.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-07-01] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2014-05-09] (Avira GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\AXELWA~1\AppData\Local\Temp\catchme.sys [X]
S3 cpuz134; \??\C:\Users\AXELWA~1\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-01 21:32 - 2014-07-01 21:32 - 00001074 _____ () C:\Users\Public\Desktop\OpenOffice 4.1.0.lnk
2014-07-01 21:32 - 2014-07-01 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0
2014-07-01 21:00 - 2014-07-01 21:00 - 00000000 ____D () C:\Users\Axel Wartburg\Desktop\OpenOffice 4.1.0 (de) Installation Files
2014-07-01 20:09 - 2014-07-01 20:10 - 00961360 _____ (Chip Digital GmbH) C:\Users\Axel Wartburg\Downloads\OpenOffice - CHIP-Installer.exe
2014-07-01 19:58 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-07-01 19:57 - 2014-07-01 19:57 - 01346519 _____ () C:\Users\Axel Wartburg\Downloads\adwcleaner_3.214.exe
2014-07-01 19:55 - 2014-07-01 19:55 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Avira
2014-07-01 19:25 - 2014-07-01 19:25 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\Temp1b9ad9b7327c1dc44f8bae13f6f6d3be
2014-06-30 13:25 - 2014-06-30 13:26 - 04536336 _____ (Avira Operations GmbH & Co. KG) C:\Users\Axel Wartburg\Downloads\avira_de_av_4062850101__ws.exe
2014-06-27 21:10 - 2014-06-27 21:10 - 00000000 ____D () C:\Users\Beate\AppData\Roaming\ProductData
2014-06-25 23:54 - 2014-06-25 23:54 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled
2014-06-25 17:26 - 2013-11-19 16:52 - 00031008 _____ (IObit) C:\Windows\system32\SmartDefragBootTime.exe
2014-06-25 17:25 - 2014-06-25 17:25 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\ProductData
2014-06-25 17:23 - 2014-06-25 17:25 - 10462488 _____ () C:\Users\Axel Wartburg\Downloads\saSetup-3.7.0.exe
2014-06-25 17:23 - 2014-06-25 17:23 - 00000000 ____D () C:\ProgramData\ProductData
2014-06-25 17:23 - 2014-06-25 17:23 - 00000000 ____D () C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-06-24 21:48 - 2014-06-25 21:45 - 00000000 ____D () C:\Users\Beate\AppData\Roaming\IObit
2014-06-23 22:17 - 2014-06-23 22:17 - 01016261 _____ (Thisisu) C:\Users\Axel Wartburg\Downloads\JRT.exe
2014-06-23 21:52 - 2014-06-23 21:52 - 00001060 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-23 19:58 - 2014-06-23 18:38 - 00216943 _____ () C:\Users\Axel Wartburg\Documents\Info-Abend%202014.doc_0.odt
2014-06-23 14:45 - 2014-06-23 14:35 - 07822461 _____ () C:\Users\Axel Wartburg\Documents\Briefbogen,%20Axel.doc_0.odt
2014-06-23 12:42 - 2014-06-30 12:58 - 00021001 _____ () C:\Users\Axel Wartburg\Downloads\Addition.txt
2014-06-22 09:58 - 2014-07-02 16:03 - 00006260 _____ () C:\Users\Axel Wartburg\Downloads\FRST.txt
2014-06-22 09:53 - 2014-06-30 12:57 - 01073664 _____ (Farbar) C:\Users\Axel Wartburg\Downloads\FRST.exe
2014-06-22 00:34 - 2014-06-26 00:04 - 00000000 ____D () C:\Program Files\IObit
2014-06-22 00:34 - 2014-06-25 17:23 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\IObit
2014-06-22 00:34 - 2014-06-22 00:46 - 00000000 ____D () C:\ProgramData\IObit
2014-06-22 00:34 - 2014-06-22 00:34 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\Google
2014-06-21 22:06 - 2014-06-21 22:11 - 26248320 _____ (IObit ) C:\Users\Axel Wartburg\Downloads\imf-setup-2.4.1.15.exe
2014-06-21 21:46 - 2014-06-21 21:46 - 01333465 _____ () C:\Users\Beate\Downloads\adwcleaner_3.212.exe
2014-06-20 18:15 - 2014-06-20 18:15 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-20 18:00 - 2014-06-20 18:00 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\com
2014-06-20 17:35 - 2014-06-20 17:35 - 00000000 ____D () C:\ProgramData\CDB
2014-06-20 17:33 - 2014-06-20 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair
2014-06-20 17:32 - 2014-06-20 17:36 - 00000000 ____D () C:\rei
2014-06-20 17:29 - 2014-06-20 17:36 - 00000155 _____ () C:\Windows\Reimage.ini
2014-06-20 13:42 - 2012-07-25 12:03 - 00017136 _____ () C:\Windows\system32\sasnative32.exe
2014-06-18 07:49 - 2014-06-18 07:50 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-12 22:21 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-12 22:21 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-12 22:21 - 2014-05-30 11:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-12 22:21 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-12 22:21 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-12 22:21 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-12 22:21 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-12 22:21 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-12 22:21 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-12 22:21 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-12 22:21 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-12 22:21 - 2014-05-30 10:28 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-12 22:21 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-12 22:21 - 2014-05-30 10:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-12 22:21 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-12 22:21 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-12 22:21 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-12 22:21 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-12 22:21 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-12 22:21 - 2014-05-30 09:57 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-12 22:21 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-12 22:21 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-12 22:21 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-12 22:21 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-12 22:21 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-12 22:21 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-12 22:21 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-12 22:21 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-12 22:09 - 2014-06-08 10:48 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-12 22:09 - 2014-06-08 10:43 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-12 22:09 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-12 22:09 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-12 22:09 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-12 22:09 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-12 22:09 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-12 22:09 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-12 22:08 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-12 22:05 - 2014-06-12 22:05 - 01058200 _____ (Adobe) C:\Users\Axel Wartburg\Downloads\install_flashplayer14x32au_mssa_aaa_aih.exe
2014-06-11 16:03 - 2014-06-12 01:51 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-06-08 19:26 - 2014-06-21 21:40 - 00001019 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-08 16:30 - 2014-06-08 16:30 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-06-08 16:11 - 2014-06-08 16:23 - 28852416 _____ (Mozilla) C:\Users\Axel Wartburg\Downloads\Firefox_Setup_de29.0.1.exe

==================== One Month Modified Files and Folders =======

2014-07-02 16:03 - 2014-06-22 09:58 - 00006260 _____ () C:\Users\Axel Wartburg\Downloads\FRST.txt
2014-07-02 16:03 - 2014-05-21 14:28 - 00000000 ____D () C:\FRST
2014-07-02 15:58 - 2014-05-24 19:00 - 00000000 ____D () C:\AdwCleaner
2014-07-02 15:44 - 2014-05-21 08:44 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-02 09:17 - 2009-07-14 06:34 - 00026496 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-02 09:17 - 2009-07-14 06:34 - 00026496 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-02 09:14 - 2014-05-20 21:35 - 01456972 _____ () C:\Windows\WindowsUpdate.log
2014-07-02 09:09 - 2014-05-21 09:14 - 00064024 _____ () C:\Users\Axel Wartburg\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-02 09:08 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-02 09:08 - 2009-07-14 06:39 - 00029737 _____ () C:\Windows\setupact.log
2014-07-02 09:08 - 2009-07-14 06:33 - 00295816 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-01 21:32 - 2014-07-01 21:32 - 00001074 _____ () C:\Users\Public\Desktop\OpenOffice 4.1.0.lnk
2014-07-01 21:32 - 2014-07-01 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.0
2014-07-01 21:21 - 2014-05-21 07:24 - 00000000 ____D () C:\Program Files\OpenOffice 4
2014-07-01 21:13 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-07-01 21:00 - 2014-07-01 21:00 - 00000000 ____D () C:\Users\Axel Wartburg\Desktop\OpenOffice 4.1.0 (de) Installation Files
2014-07-01 20:55 - 2014-05-25 10:08 - 00000000 ____D () C:\Users\Axel Wartburg\Documents\Jobcenter Hameln
2014-07-01 20:10 - 2014-07-01 20:09 - 00961360 _____ (Chip Digital GmbH) C:\Users\Axel Wartburg\Downloads\OpenOffice - CHIP-Installer.exe
2014-07-01 19:59 - 2010-11-20 23:48 - 00315974 _____ () C:\Windows\PFRO.log
2014-07-01 19:57 - 2014-07-01 19:57 - 01346519 _____ () C:\Users\Axel Wartburg\Downloads\adwcleaner_3.214.exe
2014-07-01 19:55 - 2014-07-01 19:55 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Avira
2014-07-01 19:53 - 2014-05-20 23:51 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\Adobe
2014-07-01 19:46 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Globalization
2014-07-01 19:33 - 2014-05-24 18:25 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-01 19:25 - 2014-07-01 19:25 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\Temp1b9ad9b7327c1dc44f8bae13f6f6d3be
2014-07-01 14:40 - 2014-05-21 00:27 - 00097648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-30 16:22 - 2014-05-21 13:36 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-30 13:26 - 2014-06-30 13:25 - 04536336 _____ (Avira Operations GmbH & Co. KG) C:\Users\Axel Wartburg\Downloads\avira_de_av_4062850101__ws.exe
2014-06-30 12:58 - 2014-06-23 12:42 - 00021001 _____ () C:\Users\Axel Wartburg\Downloads\Addition.txt
2014-06-30 12:57 - 2014-06-22 09:53 - 01073664 _____ (Farbar) C:\Users\Axel Wartburg\Downloads\FRST.exe
2014-06-27 21:10 - 2014-06-27 21:10 - 00000000 ____D () C:\Users\Beate\AppData\Roaming\ProductData
2014-06-26 09:49 - 2014-05-20 23:41 - 00000000 ____D () C:\ProgramData\McAfee
2014-06-26 00:04 - 2014-06-22 00:34 - 00000000 ____D () C:\Program Files\IObit
2014-06-25 23:54 - 2014-06-25 23:54 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled
2014-06-25 21:45 - 2014-06-24 21:48 - 00000000 ____D () C:\Users\Beate\AppData\Roaming\IObit
2014-06-25 17:25 - 2014-06-25 17:25 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\ProductData
2014-06-25 17:25 - 2014-06-25 17:23 - 10462488 _____ () C:\Users\Axel Wartburg\Downloads\saSetup-3.7.0.exe
2014-06-25 17:23 - 2014-06-25 17:23 - 00000000 ____D () C:\ProgramData\ProductData
2014-06-25 17:23 - 2014-06-25 17:23 - 00000000 ____D () C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-06-25 17:23 - 2014-06-22 00:34 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\IObit
2014-06-24 22:25 - 2010-11-20 23:01 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-23 22:17 - 2014-06-23 22:17 - 01016261 _____ (Thisisu) C:\Users\Axel Wartburg\Downloads\JRT.exe
2014-06-23 21:52 - 2014-06-23 21:52 - 00001060 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-23 21:52 - 2014-05-24 18:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-23 21:52 - 2014-05-24 18:24 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-06-23 18:38 - 2014-06-23 19:58 - 00216943 _____ () C:\Users\Axel Wartburg\Documents\Info-Abend%202014.doc_0.odt
2014-06-23 14:35 - 2014-06-23 14:45 - 07822461 _____ () C:\Users\Axel Wartburg\Documents\Briefbogen,%20Axel.doc_0.odt
2014-06-22 00:46 - 2014-06-22 00:34 - 00000000 ____D () C:\ProgramData\IObit
2014-06-22 00:34 - 2014-06-22 00:34 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\Google
2014-06-21 22:11 - 2014-06-21 22:06 - 26248320 _____ (IObit ) C:\Users\Axel Wartburg\Downloads\imf-setup-2.4.1.15.exe
2014-06-21 21:46 - 2014-06-21 21:46 - 01333465 _____ () C:\Users\Beate\Downloads\adwcleaner_3.212.exe
2014-06-21 21:40 - 2014-06-08 19:26 - 00001019 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-21 21:40 - 2014-05-20 22:45 - 00001164 _____ () C:\Users\Axel Wartburg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-21 21:28 - 2014-05-20 22:45 - 00000000 ____D () C:\Users\Axel Wartburg
2014-06-21 21:21 - 2014-05-21 08:47 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\IrfanView
2014-06-21 21:21 - 2014-05-21 00:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-21 21:21 - 2014-05-21 00:27 - 00000000 ____D () C:\Program Files\Avira
2014-06-21 21:21 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-06-21 21:21 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\registration
2014-06-21 21:08 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-06-21 20:33 - 2014-05-21 17:47 - 00000000 ____D () C:\Users\Beate
2014-06-21 11:23 - 2014-05-21 00:27 - 00000000 ____D () C:\ProgramData\Avira
2014-06-20 18:26 - 2014-05-20 23:41 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-06-20 18:15 - 2014-06-20 18:15 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-20 18:00 - 2014-06-20 18:00 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\com
2014-06-20 17:36 - 2014-06-20 17:32 - 00000000 ____D () C:\rei
2014-06-20 17:36 - 2014-06-20 17:29 - 00000155 _____ () C:\Windows\Reimage.ini
2014-06-20 17:35 - 2014-06-20 17:35 - 00000000 ____D () C:\ProgramData\CDB
2014-06-20 17:33 - 2014-06-20 17:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair
2014-06-19 10:13 - 2014-05-20 23:16 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-06-18 07:50 - 2014-06-18 07:49 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-15 21:37 - 2014-05-21 09:26 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Roaming\vlc
2014-06-14 19:15 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-06-13 11:28 - 2014-05-22 21:12 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-12 22:41 - 2014-05-29 10:11 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-12 22:39 - 2014-05-29 10:11 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-12 22:05 - 2014-06-12 22:05 - 01058200 _____ (Adobe) C:\Users\Axel Wartburg\Downloads\install_flashplayer14x32au_mssa_aaa_aih.exe
2014-06-12 01:51 - 2014-06-11 16:03 - 00000000 ____D () C:\Program Files\Mozilla Thunderbird
2014-06-11 10:08 - 2014-05-20 23:42 - 00000000 ____D () C:\Users\Axel Wartburg\AppData\Local\Thunderbird
2014-06-08 16:30 - 2014-06-08 16:30 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-06-08 16:23 - 2014-06-08 16:11 - 28852416 _____ (Mozilla) C:\Users\Axel Wartburg\Downloads\Firefox_Setup_de29.0.1.exe
2014-06-08 10:48 - 2014-06-12 22:09 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-08 10:43 - 2014-06-12 22:09 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

Some content of TEMP:
====================
C:\Users\Axel Wartburg\AppData\Local\temp\Apache_OpenOffice_4.1.0_Win_x86_install_de.exe
C:\Users\Axel Wartburg\AppData\Local\temp\avgnt.exe
C:\Users\Axel Wartburg\AppData\Local\temp\BackupSetup.exe
C:\Users\Axel Wartburg\AppData\Local\temp\foxy_security.exe
C:\Users\Axel Wartburg\AppData\Local\temp\ICReinstall_install-openoffice.exe
C:\Users\Axel Wartburg\AppData\Local\temp\optprosetup.exe
C:\Users\Axel Wartburg\AppData\Local\temp\ReimagePackage.exe
C:\Users\Axel Wartburg\AppData\Local\temp\sdanircmdc.exe
C:\Users\Axel Wartburg\AppData\Local\temp\sdapskill.exe
C:\Users\Axel Wartburg\AppData\Local\temp\sdaspwn.exe
C:\Users\Beate\AppData\Local\temp\avgnt.exe
C:\Users\Beate\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-28 10:54

==================== End Of Log ============================