Hallo ihr,

nachdem ich heute mit meinem Laptop Probleme hatte (Bildschirm blieb nach Neustart schwarz, nach einigen Versuchen und dem Herausnehmen der CMOS-Batterie gings wieder), machte ich mittels Avast Free Antivirus einen Check (im abgesicherten Modus), welcher auch drei Infektionen zeigte.
Anschließend machte ich noch eine Überprüfung, welche "Startzeit-Überprüfung" hieß. Dabei kam des öfteren die Meldung, dass Trojaner namens "BProtect" (mit unterschiedlichen zusätzlichen Endungen) vorhanden seien und dass diese nicht beseitigt werden können. Wenn ich beim Avast in den Scan-Verlauf gehe, ist dieser leer, warum auch immer.
Nun weiß ich nicht, ob dieser Trojaner jetzt noch drauf ist, oder nicht.

Der Laptop läuft wieder ganz normal, aber bevor ich jetzt selber herum doktore, dachte ich mir, ich suche mir hier lieber Hilfe, um auf Nummer sicher zu gehen.
Es handelt sich um Windows 7 Home Premium SP1 64-Bit.

Kann mir jemand von euch dabei helfen?

Schöne Grüße
Michael

Anbei die Logs von defogger und first+addition:

defogger:

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 21:48 on 01/06/2014 (Michael Pfandler)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

first:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-06-2014 01
Ran by Michael Pfandler (administrator) on THINKPAD on 01-06-2014 21:50:16
Running from C:\Users\Michael Pfandler\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(M-Audio) C:\Program Files (x86)\M-Audio\Axiom AIR Mini 32\AudioDevMon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(UASSOFT.COM) C:\Program Files (x86)\Keyboard & Mouse Driver\KMWDSrv.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Check Point Software Technologies, Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(KORG Inc.) C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe
(UASSOFT.COM) C:\Program Files (x86)\Keyboard & Mouse Driver\StartAutorun.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlk.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\mkrmsg.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(UASSOFT.COM) C:\Program Files (x86)\Keyboard & Mouse Driver\KMCONFIG.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE
(UASSOFT.COM) C:\Program Files (x86)\Keyboard & Mouse Driver\KMProcess.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
() C:\Users\Michael Pfandler\Desktop\Defogger.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1654400 2012-02-21] (Conexant Systems, Inc.)
HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [178960 2012-03-15] (Intel Corporation)
HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [11407120 2012-03-27] (Intel Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2881336 2012-06-19] (Synaptics Incorporated)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [507744 2011-12-20] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [RotateImage] => C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-30] (Ricoh co.,Ltd.)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133400 2012-03-07] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-04-13] (Intel Corporation)
HKLM-x32\...\Run: [PWMTRV] => rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3888648 2014-05-28] (AVAST Software)
HKLM-x32\...\Run: [KORG USB-MIDI Driver] => C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe [393656 2012-10-05] (KORG Inc.)
HKLM-x32\...\Run: [KMCONFIG] => C:\Program Files (x86)\Keyboard & Mouse Driver\StartAutorun.exe KMConfig.exe
HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2301571512-4160980396-1932910602-1000\...\Run: [Google Update] => C:\Users\Michael Pfandler\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-02-03] (Google Inc.)
HKU\S-1-5-21-2301571512-4160980396-1932910602-1000\...\MountPoints2: {aee08898-625c-11e2-806d-62fd4dec07f5} - "I:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-2301571512-4160980396-1932910602-1000\...\MountPoints2: {df044aab-2abe-11e3-9d4a-84a6c87aaf7a} - E:\LGAutoRun.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [260968 2012-06-10] (NVIDIA Corporation)
Startup: C:\Users\Michael Pfandler\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x3C19504DB9E9CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-at
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1395096716&from=amt&uid=M4-CT256M4SSD3_00000000124303519FF3
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1395096716&from=amt&uid=M4-CT256M4SSD3_00000000124303519FF3&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1395096716&from=amt&uid=M4-CT256M4SSD3_00000000124303519FF3
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1395096716&from=amt&uid=M4-CT256M4SSD3_00000000124303519FF3
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1395096716&from=amt&uid=M4-CT256M4SSD3_00000000124303519FF3&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1395096716&from=amt&uid=M4-CT256M4SSD3_00000000124303519FF3&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1395096716&from=amt&uid=M4-CT256M4SSD3_00000000124303519FF3
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1395096716&from=amt&uid=M4-CT256M4SSD3_00000000124303519FF3
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1395096716&from=amt&uid=M4-CT256M4SSD3_00000000124303519FF3&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1395096716&from=amt&uid=M4-CT256M4SSD3_00000000124303519FF3
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1395096716&from=amt&uid=M4-CT256M4SSD3_00000000124303519FF3&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1395096716&from=amt&uid=M4-CT256M4SSD3_00000000124303519FF3&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1395096716&from=amt&uid=M4-CT256M4SSD3_00000000124303519FF3&q={searchTerms}
SearchScopes: HKCU - URL hxxp://www.trovigo.com/Results.aspx?gd=&ctid=CT3318522&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=5&UP=SPD6561716-A0AD-4916-8B8D-2A50BB997B95&q={searchTerms}&SSPV=
SearchScopes: HKCU - SuggestionsURL_JSON hxxp://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=119293&tt=gc_&babsrc=SP_ss_din2g&mntrId=C80E84A6C87AAF77
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1395096716&from=amt&uid=M4-CT256M4SSD3_00000000124303519FF3&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Michael Pfandler\AppData\Roaming\Mozilla\Firefox\Profiles\tjkcd753.default-1401650072905
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Michael Pfandler\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Michael Pfandler\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF user.js: detected! => C:\Users\Michael Pfandler\AppData\Roaming\Mozilla\Firefox\Profiles\tjkcd753.default-1401650072905\user.js
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\awesomehp.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-01-04]
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []
FF HKLM-x32\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\Michael Pfandler\AppData\Roaming\Mozilla\Firefox\Profiles\yrheszs4.default\extensions\quick_start@gmail.com
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-28] (AVAST Software)
R2 AxiomAIRMini32AudioDevMon; C:\Program Files (x86)\M-Audio\Axiom AIR Mini 32\AudioDevMon.exe [192360 2012-12-13] (M-Audio)
S3 digiSPTIService64; C:\Program Files\Avid\Pro Tools\digisptiservice64.exe [190464 2013-12-16] (Avid Technology, Inc.)
S4 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-03-07] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [163608 2012-03-07] (Intel Corporation)
R2 KMWDSERVICE; C:\Program Files (x86)\Keyboard & Mouse Driver\KMWDSrv.exe [1821184 2009-08-31] (UASSOFT.COM)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [133992 2011-07-12] (Lenovo Group Limited)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2012-02-26] ()
S4 Polar Daemon; C:\Program Files (x86)\Polar\Daemon\polard.exe [413184 2012-08-17] ()
R2 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe [54160 2013-06-18] (Check Point Software Technologies, Ltd.)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2669840 2012-02-26] (Intel® Corporation)
S2 Update Rock Turner; "C:\Program Files (x86)\Rock Turner\updateRockTurner.exe" [X]

==================== Drivers (Whitelisted) ====================

S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [29184 2012-07-03] (LG Electronics Inc.)
S3 AndNetDiag2; C:\Windows\System32\DRIVERS\lgandnetdiag264.sys [29184 2012-07-03] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [36352 2012-07-03] (LG Electronics Inc.)
S3 andnetndis; C:\Windows\System32\DRIVERS\lgandnetndis64.sys [93184 2012-07-04] (LG Electronics Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-05-28] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-05-28] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-05-28] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-05-28] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-05-28] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-05-28] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-05-28] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-12-19] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-05-28] ()
S3 AXIOMAIRMINI32; C:\Windows\System32\DRIVERS\MAudioAxiomAIRMini32.sys [134504 2012-12-13] (M-Audio)
S3 DGUSBAP; C:\Windows\System32\DRIVERS\dgmbx2.sys [194864 2011-02-13] (Avid Technology, Inc.)
S3 iLokDrvr; C:\Windows\System32\DRIVERS\iLokDrvr.sys [25808 2013-12-25] ()
S3 KORGUMDS; C:\Windows\System32\Drivers\KORGUM64.SYS [34136 2013-10-03] (KORG INC.)
S3 MBX2DFU; C:\Windows\System32\DRIVERS\dgmbx2fu.sys [32944 2011-02-13] (Avid Technology, Inc.)
S3 rig3avs; C:\Windows\System32\Drivers\rig3avs.sys [359784 2012-12-18] (Native Instruments GmbH)
S3 rig3usb_svc; C:\Windows\System32\Drivers\rig3usb.sys [100200 2012-12-18] (Native Instruments GmbH)
R3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [259688 2011-10-27] (Realtek Semiconductor Corp.)
R3 SmbDrvIntel; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [27448 2012-06-19] (Synaptics Incorporated)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-01-15] (Anchorfree Inc.)
U3 swmidi; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-01 21:50 - 2014-06-01 21:50 - 00023531 _____ () C:\Users\Michael Pfandler\Desktop\FRST.txt
2014-06-01 21:50 - 2014-06-01 21:50 - 00000000 ____D () C:\FRST
2014-06-01 21:49 - 2014-06-01 21:49 - 02067456 _____ (Farbar) C:\Users\Michael Pfandler\Desktop\FRST64.exe
2014-06-01 21:48 - 2014-06-01 21:48 - 00000494 _____ () C:\Users\Michael Pfandler\Desktop\defogger_disable.log
2014-06-01 21:48 - 2014-06-01 21:48 - 00000000 _____ () C:\Users\Michael Pfandler\defogger_reenable
2014-06-01 21:47 - 2014-06-01 21:47 - 00050477 _____ () C:\Users\Michael Pfandler\Desktop\Defogger.exe
2014-06-01 21:35 - 2014-06-01 21:38 - 00000000 ____D () C:\Users\Michael Pfandler\AppData\Roaming\Systweak
2014-06-01 21:35 - 2014-06-01 21:35 - 00003282 _____ () C:\windows\System32\Tasks\Digital Sites
2014-06-01 21:35 - 2014-06-01 21:35 - 00000320 _____ () C:\windows\Tasks\Digital Sites.job
2014-06-01 21:35 - 2014-06-01 21:35 - 00000000 ____D () C:\Users\Michael Pfandler\AppData\Roaming\DigitalSites
2014-06-01 21:35 - 2014-04-25 14:49 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\windows\system32\roboot64.exe
2014-06-01 12:59 - 2014-06-01 12:59 - 00004387 _____ () C:\windows\SysWOW64\jupdate-1.7.0_60-b19.log
2014-06-01 12:59 - 2014-05-07 15:02 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2014-06-01 12:59 - 2014-05-07 14:59 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2014-06-01 12:59 - 2014-05-07 14:59 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2014-06-01 12:59 - 2014-05-07 14:58 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2014-05-29 19:51 - 2014-05-29 19:52 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-05-28 18:17 - 2014-05-28 18:16 - 00029208 _____ () C:\windows\system32\Drivers\aswHwid.sys
2014-05-28 18:16 - 2014-05-28 18:16 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr

==================== One Month Modified Files and Folders =======

2014-06-01 21:50 - 2014-06-01 21:50 - 00023531 _____ () C:\Users\Michael Pfandler\Desktop\FRST.txt
2014-06-01 21:50 - 2014-06-01 21:50 - 00000000 ____D () C:\FRST
2014-06-01 21:50 - 2013-01-03 13:56 - 00000000 ____D () C:\Users\Michael Pfandler\AppData\Local\Temp
2014-06-01 21:49 - 2014-06-01 21:49 - 02067456 _____ (Farbar) C:\Users\Michael Pfandler\Desktop\FRST64.exe
2014-06-01 21:48 - 2014-06-01 21:48 - 00000494 _____ () C:\Users\Michael Pfandler\Desktop\defogger_disable.log
2014-06-01 21:48 - 2014-06-01 21:48 - 00000000 _____ () C:\Users\Michael Pfandler\defogger_reenable
2014-06-01 21:48 - 2013-01-03 13:56 - 00000000 ____D () C:\Users\Michael Pfandler
2014-06-01 21:47 - 2014-06-01 21:47 - 00050477 _____ () C:\Users\Michael Pfandler\Desktop\Defogger.exe
2014-06-01 21:47 - 2013-01-03 13:56 - 01860604 _____ () C:\windows\WindowsUpdate.log
2014-06-01 21:47 - 2009-07-14 19:58 - 00654400 _____ () C:\windows\system32\perfh007.dat
2014-06-01 21:47 - 2009-07-14 19:58 - 00130240 _____ () C:\windows\system32\perfc007.dat
2014-06-01 21:47 - 2009-07-14 07:13 - 01498742 _____ () C:\windows\system32\PerfStringBackup.INI
2014-06-01 21:42 - 2013-01-03 16:50 - 00000828 _____ () C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2014-06-01 21:41 - 2014-02-03 13:20 - 00001164 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2301571512-4160980396-1932910602-1000UA.job
2014-06-01 21:41 - 2013-01-03 16:44 - 00190074 _____ () C:\windows\PFRO.log
2014-06-01 21:41 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-06-01 21:41 - 2009-07-14 06:51 - 00112041 _____ () C:\windows\setupact.log
2014-06-01 21:38 - 2014-06-01 21:35 - 00000000 ____D () C:\Users\Michael Pfandler\AppData\Roaming\Systweak
2014-06-01 21:35 - 2014-06-01 21:35 - 00003282 _____ () C:\windows\System32\Tasks\Digital Sites
2014-06-01 21:35 - 2014-06-01 21:35 - 00000320 _____ () C:\windows\Tasks\Digital Sites.job
2014-06-01 21:35 - 2014-06-01 21:35 - 00000000 ____D () C:\Users\Michael Pfandler\AppData\Roaming\DigitalSites
2014-06-01 21:22 - 2009-07-14 06:45 - 00015824 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-01 21:22 - 2009-07-14 06:45 - 00015824 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-01 15:01 - 2013-10-18 09:41 - 00000000 ____D () C:\Users\Michael Pfandler\AppData\Roaming\vlc
2014-06-01 15:00 - 2013-12-25 15:31 - 00000000 ____D () C:\Users\Public\Pro Tools
2014-06-01 14:53 - 2014-02-24 18:31 - 00000016 _____ () C:\Users\Michael Pfandler\AppData\Roaming\msregsvv.dll
2014-06-01 14:53 - 2014-02-24 18:31 - 00000016 _____ () C:\ProgramData\autobk.inc
2014-06-01 14:53 - 2013-09-15 01:53 - 00000000 ___HD () C:\Users\Michael Pfandler\AppData\Local\UBYEjS9ESxW
2014-06-01 14:53 - 2013-03-30 21:45 - 00000000 ___HD () C:\Users\Michael Pfandler\AppData\Local\pd6ewjNs
2014-06-01 14:53 - 2012-12-13 10:17 - 00000000 ___HD () C:\Users\Michael Pfandler\AppData\Local\Mw8cnZgHnm
2014-06-01 14:53 - 2012-10-11 07:58 - 00000000 ___HD () C:\Users\Michael Pfandler\AppData\Local\GkyGRgMwTA
2014-06-01 14:20 - 2013-01-12 09:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-01 13:24 - 2013-05-16 22:27 - 00627200 ___SH () C:\Users\Michael Pfandler\Desktop\Thumbs.db
2014-06-01 13:00 - 2013-12-25 15:07 - 00000000 ____D () C:\ProgramData\Oracle
2014-06-01 12:59 - 2014-06-01 12:59 - 00004387 _____ () C:\windows\SysWOW64\jupdate-1.7.0_60-b19.log
2014-06-01 12:59 - 2013-12-25 15:07 - 00000000 ____D () C:\Program Files (x86)\Java
2014-06-01 12:36 - 2013-05-25 15:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-31 21:05 - 2009-07-14 07:08 - 00032640 _____ () C:\windows\Tasks\SCHEDLGU.TXT
2014-05-31 19:41 - 2014-02-03 13:20 - 00001112 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2301571512-4160980396-1932910602-1000Core.job
2014-05-31 15:45 - 2013-01-03 16:50 - 00000830 _____ () C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2014-05-30 19:14 - 2013-01-19 20:25 - 00000000 ____D () C:\Users\Michael Pfandler\Documents\Outlook-Dateien
2014-05-29 19:52 - 2014-05-29 19:51 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-05-29 19:52 - 2013-05-20 10:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-05-29 19:51 - 2013-05-20 10:53 - 00000000 ____D () C:\Users\Michael Pfandler\AppData\Roaming\DVDVideoSoft
2014-05-29 00:35 - 2013-05-20 10:48 - 00000000 ____D () C:\Users\Michael Pfandler\AppData\Local\Windows Live
2014-05-28 18:17 - 2014-01-27 10:11 - 00085328 _____ (AVAST Software) C:\windows\system32\Drivers\aswstm.sys
2014-05-28 18:17 - 2013-01-04 18:03 - 01039096 _____ (AVAST Software) C:\windows\system32\Drivers\aswsnx.sys
2014-05-28 18:17 - 2013-01-04 18:03 - 00423240 _____ (AVAST Software) C:\windows\system32\Drivers\aswsp.sys
2014-05-28 18:17 - 2013-01-04 18:03 - 00003924 _____ () C:\windows\System32\Tasks\avast! Emergency Update
2014-05-28 18:16 - 2014-05-28 18:17 - 00029208 _____ () C:\windows\system32\Drivers\aswHwid.sys
2014-05-28 18:16 - 2014-05-28 18:16 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr
2014-05-28 18:16 - 2013-03-25 10:51 - 00208416 _____ () C:\windows\system32\Drivers\aswVmm.sys
2014-05-28 18:16 - 2013-03-25 10:51 - 00065776 _____ () C:\windows\system32\Drivers\aswRvrt.sys
2014-05-28 18:16 - 2013-01-04 18:03 - 00334648 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2014-05-28 18:16 - 2013-01-04 18:03 - 00093568 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2014-05-28 18:16 - 2013-01-04 18:03 - 00079184 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2014-05-08 19:36 - 2014-02-03 13:20 - 00004156 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2301571512-4160980396-1932910602-1000UA
2014-05-08 19:36 - 2014-02-03 13:20 - 00003760 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2301571512-4160980396-1932910602-1000Core
2014-05-08 19:20 - 2014-01-10 16:40 - 00000000 ____D () C:\Sessions
2014-05-07 15:02 - 2014-06-01 12:59 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-07 14:59 - 2014-06-01 12:59 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2014-05-07 14:59 - 2014-06-01 12:59 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2014-05-07 14:58 - 2014-06-01 12:59 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2014-05-06 23:06 - 2013-01-04 19:29 - 00000000 ____D () C:\Users\Michael Pfandler\Desktop\Studium
2014-05-02 10:42 - 2013-01-07 09:43 - 00000000 ____D () C:\ProgramData\CanonIJPLM

Some content of TEMP:
====================
C:\Users\Michael Pfandler\AppData\Local\Temp\20130117011321321jniverify.dll
C:\Users\Michael Pfandler\AppData\Local\Temp\D1395096636.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\DownloadManager.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\htmlayout.dll
C:\Users\Michael Pfandler\AppData\Local\Temp\ICReinstall_ZipExtractorSetup.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\jre-7u11-windows-i586-iftw.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Michael Pfandler\AppData\Local\Temp\nslBF32.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\nslD796.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\nsqBC44.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\nsv98CD.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\nswD516.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\Setup-C4.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Michael Pfandler\AppData\Local\Temp\sfamcc00002.dll
C:\Users\Michael Pfandler\AppData\Local\Temp\sfareca00001.dll
C:\Users\Michael Pfandler\AppData\Local\Temp\sfextra.dll
C:\Users\Michael Pfandler\AppData\Local\Temp\sp-downloader.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\toolbar15798470.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\toolbar27063630.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\uninst1.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\uninstall.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\uninstall15857392.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\uninstall15868764.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\uninstall27227696.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\uninstall27227728.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\YSPCUNLR.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-01 14:52

==================== End Of Log ============================
         

addition:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-06-2014 01
Ran by Michael Pfandler at 2014-06-01 21:50:33
Running from C:\Users\Michael Pfandler\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: ZoneAlarm Free Firewall Firewall (Disabled) {E6380B7E-D4B2-19F1-083E-56486607704B}

==================== Installed Programs ======================

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.9.900.117 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.43 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.03) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.03 - Adobe Systems Incorporated)
AIR Creative Collection (HKLM\...\{D3AE0FF1-6A78-4099-8779-B05E313B7828}) (Version: 11.1.0 - AIR Music Technology)
Anzeige am Bildschirm (HKLM\...\OnScreenDisplay) (Version: 6.72.00 - )
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ARC System 2 version 2.2.0 (HKLM\...\{4952A610-D484-4F6A-B1B4-33797CFDB821}_is1) (Version: 2.2.0 - IK Multimedia)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.10 - Michael Tippach)
avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2018 - Avast Software)
Avid Effects (HKLM\...\{0faad20d-ad8d-4249-ad93-7f006f2aa54b}) (Version: 11.1.0 - Avid Technology, Inc.)
Avid HD Driver (x64) (HKLM\...\{658E112A-8776-4430-A275-D9248732DFB9}) (Version: 11.1.0 - Avid Technology, Inc.)
Avid Mbox 2 USB Drivers (x64) (HKLM\...\{F9242D4E-09E7-45C7-A53A-83375D0FAD42}) (Version: 9.0.2 - Avid Technology, Inc.)
Avid Pro Tools (HKLM\...\{6639EEFC-1096-40B4-9BF6-92046A3D4287}) (Version: 11.1.0 - Avid Technology, Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Burn.Now 4.5 (x32 Version: 4.5.0 - Corel Corporation) Hidden
Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version:  - )
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version:  - )
Canon MG5300 series Benutzerregistrierung (HKLM-x32\...\Canon MG5300 series Benutzerregistrierung) (Version:  - )
Canon MG5300 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5300_series) (Version:  - )
Canon MG5300 series On-screen Manual (HKLM-x32\...\Canon MG5300 series On-screen Manual) (Version:  - )
Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version:  - )
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )
Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version:  - )
Cisco AnyConnect Diagnostics and Reporting Tool (HKLM-x32\...\{1DE90418-1E7E-4901-B548-E800DBBDDC15}) (Version: 3.1.01065 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client  (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 3.1.01065 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.01065 - Cisco Systems, Inc.) Hidden
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.54.34.0 - Conexant)
Corel Burn.Now Lenovo Edition (HKLM-x32\...\InstallShield_{A3BE3F1E-2472-4211-8735-E8239BE49D9F}) (Version: 4.5.0 - Corel Corporation)
Corel DVD MovieFactory 7 (x32 Version: 7.0.0 - Corel Corporation) Hidden
Corel DVD MovieFactory Lenovo Edition (HKLM-x32\...\InstallShield_{50F68032-B5B7-4513-9116-C978DBD8F27A}) (Version: 7.0.0 - Corel Corporation)
Corel WinDVD (HKLM-x32\...\{5C1F18D2-F6B7-4242-B803-B5A78648185D}) (Version: 10.0.6.392 - Corel Inc.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{3823EC5A-1CA4-42CA-9D5B-F94ABD65410D}) (Version:  - Microsoft)
Direct DiscRecorder (x32 Version: 1.00.0000 - Corel Corporation) Hidden
Energie-Manager (HKLM-x32\...\{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}) (Version: 6.38 - )
FileZilla Client 3.6.0.2 (HKLM-x32\...\FileZilla Client) (Version: 3.6.0.2 - FileZilla Project)
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Free YouTube to MP3 Converter version 3.12.35.514 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.35.514 - DVDVideoSoft Ltd.)
FXpansion BFD2 (HKLM-x32\...\FXpansion BFD2) (Version: 2.3.1.6 - FXpansion Audio UK Ltd)
FXpansion BFD3 (HKLM-x32\...\FXpansion BFD3) (Version: 3.0.1 - FXpansion Audio UK Ltd)
Google Calendar Sync (HKLM-x32\...\Google Calendar Sync) (Version:  - )
Ignite (HKLM-x32\...\{9A731246-E02E-44DC-940D-0F8110C1789D}) (Version: 1.2.0 - AIR Music Technology)
Ignite (x32 Version: 1.2.0 - AIR Music Technology) Hidden
IK Multimedia Authorization Manager version 1.0.9 (HKLM\...\{85BC0DCB-69E5-4279-AA25-F108EF896588}_is1) (Version: 1.0.9 - IK Multimedia)
Integrated Camera Driver Installer Package Ver.1.2.1.18 (HKLM-x32\...\{A78800AF-1779-4AE8-8EBE-16E1BE727C71}) (Version: 1.2.1.18 - RICOH)
Intel PROSet Wireless (Version:  - ) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.35342 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.4.1441 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version:  - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2778 - Intel Corporation)
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (HKLM\...\{37EC048A-81A2-452A-8D1F-3BE2018E767D}) (Version: 15.1.0.0096 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{3015F546-6C3E-4E6A-B564-BCDF88C0BA2A}) (Version: 2.1.1.0153 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.225 - Intel Corporation)
Intel(R) WiDi (HKLM-x32\...\{93F34C5C-ACAA-48F3-9B26-70359A117F12}) (Version: 3.0.12.0 - Intel Corporation)
Intel(R) Wireless Display (HKLM\...\{28EF7372-9087-4AC3-9B9F-D9751FCDF830}) (Version:  - )
Intel® PROSet/Wireless WiFi-Software (HKLM\...\{E97F409F-9E1C-42A0-B72D-765A78DF3696}) (Version: 15.01.0000.0830 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation)
Interlok driver setup x64 (HKLM\...\{25613C10-27D2-410B-942B-D922D5C3A7BE}) (Version: 5.9.0 - PACE Anti-Piracy, Inc.)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.600 - Oracle)
Java Auto Updater (x32 Version: 2.1.60.19 - Oracle, Inc.) Hidden
Keyboard & Mouse Driver (HKLM-x32\...\InstallShield_{B910DD1A-49B1-4068-9C08-E3C3AEC0C30A}) (Version: 5.1 - Driver Builder)
Keyboard & Mouse Driver (x32 Version: 5.1 - Driver Builder) Hidden
KORG M50 Editor (HKLM-x32\...\{DCE7446A-23C1-4CAE-8291-F5611D78A0A1}) (Version: 1.1.0 - KORG Inc.)
KORG USB-MIDI Driver Tools for Windows (HKLM-x32\...\{B9AFA8A2-E972-48D2-A30B-B26302B3CE6A}) (Version: 1.14.0401 - Korg Inc.)
Lenovo Auto Scroll Utility (HKLM\...\LenovoAutoScrollUtility) (Version: 1.11 - )
Lenovo Patch Utility (HKLM-x32\...\{6E6E7725-C7BC-4C39-8B3F-14B67331A120}) (Version: 1.3.0.9 - Lenovo Group Limited)
Lenovo Patch Utility 64 bit (HKLM\...\{0369F866-2CE0-4EB9-B426-88FA122C6E82}) (Version: 1.3.0.9 - Lenovo Group Limited)
Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.65.05.21 - )
Lenovo Welcome (HKLM-x32\...\{2DC26D10-CC6A-494F-BEA3-B5BC21126D5E}) (Version: 3.1.0020.00 - Lenovo Group Limited)
LG United Mobile Drivers (HKLM-x32\...\{5DB849D6-9392-4FB7-9ABB-87ED433152E5}) (Version: 3.8.1 - LG Electronics)
M-Audio Axiom AIR Mini 32 1.0.1 (x64) (HKLM\...\{613163E3-0FC3-4CA3-8835-05D2D6C03523}) (Version: 1.0.1 - M-Audio)
Melodyne Runtime 4.1 (x64) (HKLM\...\{53EE2829-E9DB-4913-B3EA-96F10F84E98B}) (Version: 1.0.1 - Celemony Software GmbH)
Melodyne singletrack (HKLM-x32\...\{16DF894D-FC3F-4B87-908D-671E201CD7A8}) (Version: 2.01.0202 - Celemony Software GmbH)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 Service Pack 1 (SP1) (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{7BC9B5EB-125A-4E9B-97E1-8D85B5E960B8}) (Version:  - Microsoft)
Microsoft Office 2010 Service Pack 1 (SP1) (Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Business 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Office 32-bit Components 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Outlook Hotmail Connector 64-Bit (HKLM\...\{95140000-0081-0407-1000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (x32 Version: 11.0.51106 - Microsoft Corporation) Hidden
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Music Manager (HKCU\...\MusicManager) (Version:  - Google, Inc.)
Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version: 1.6.0.1528 - Native Instruments)
Native Instruments Controller Editor (Version: 1.6.0.1528 - Native Instruments) Hidden
Native Instruments Guitar Rig 5 (HKLM-x32\...\Native Instruments Guitar Rig 5) (Version: 5.2.0.2770 - Native Instruments)
Native Instruments Guitar Rig 5 (Version: 5.2.0.2770 - Native Instruments) Hidden
Native Instruments Guitar Rig Mobile IO Driver (HKLM-x32\...\Native Instruments Guitar Rig Mobile IO Driver) (Version:  - Native Instruments)
Native Instruments Guitar Rig Mobile IO Driver (Version: 3.1.0.761 - Native Instruments) Hidden
Native Instruments Guitar Rig Session IO Driver (HKLM-x32\...\Native Instruments Guitar Rig Session IO Driver) (Version:  - Native Instruments)
Native Instruments Guitar Rig Session IO Driver (Version: 3.1.0.761 - Native Instruments) Hidden
Native Instruments Rig Kontrol 3 Driver (HKLM-x32\...\Native Instruments Rig Kontrol 3 Driver) (Version:  - Native Instruments)
Native Instruments Rig Kontrol 3 Driver (Version: 3.1.0.761 - Native Instruments) Hidden
Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.5.2.1549 - Native Instruments)
Native Instruments Service Center (Version: 2.5.2.1549 - Native Instruments) Hidden
Native Instruments Supercharger (HKLM-x32\...\Native Instruments Supercharger) (Version: 1.1.0.418 - Native Instruments)
Native Instruments Supercharger (Version: 1.1.0.418 - Native Instruments) Hidden
NVIDIA Install Application (Version: 2.1002.62.312 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 296.90 (Version: 296.90 - NVIDIA Corporation) Hidden
Nvu 1.0 (HKLM-x32\...\Nvu_is1) (Version: 1.0 - Thorsten Fritz)
PACE License Support Win64 (HKLM-x32\...\InstallShield_{72ad9d51-0903-4fe7-af5d-33b3185fa6e9}) (Version: 2.3.0.0443 - PACE Anti-Piracy, Inc.)
PACE License Support Win64 (Version: 2.3.0.0443 - PACE Anti-Piracy, Inc.) Hidden
Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Play Update 4.1.5 (HKLM\...\{7800ACD2-1553-4B06-81EA-4E3437D839AB}) (Version: 4.1.5 - EastWest Sounds, Inc)
Polar Daemon (HKLM-x32\...\{2BA9320D-E061-4C71-ACCB-AC0E9D4FC82B}) (Version: 2.2.20000 - Polar Electro Oy)
Polar WebSync (HKLM-x32\...\{320453EE-6AEA-4E1A-8E64-72F33C0C928F}) (Version: 2.8.10006 - Polar Electro Oy)
Presenter version 1.27 (HKLM-x32\...\{F5A954ED-07FE-4DFB-8763-F4AD47D79218}_is1) (Version: 1.27 - Ratisbonsoft)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
RapidBoot Shield (HKLM\...\{5E2652DF-743F-482B-A593-C95F431A5769}) (Version: 1.23 - Lenovo)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.29005 - Realtek Semiconductor Corp.)
Rocksmith (HKLM-x32\...\Steam App 205190) (Version:  - )
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.16.0 - SAMSUNG Electronics Co., Ltd.)
Skype™ 6.3 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.3.107 - Skype Technologies S.A.)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
ThinkPad UltraNav Driver (HKLM\...\SynTPDeinstKey) (Version: 16.1.4.17 - )
TomTom HOME (HKLM-x32\...\{EC5F4C1B-F838-4CB7-8561-8F809296428B}) (Version: 2.9.5 - Ihr Firmenname)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2836939v3) (Version: 3 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{FEF4C57D-0975-4D3C-ACC7-DCD038C3788F}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{59446CD0-D49A-4154-BDD5-59CB3B6F89AC}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{DB0B0CDF-77EC-47B0-94E2-4738573A1E58}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553065) (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{57CEB66B-DD29-4883-92A2-671331657B52}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553267) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{3E381AC3-30C3-41D7-9B27-B3F3E17BDCB8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553310) 64-Bit Edition (HKLM\...\{90140000-006E-0407-1000-0000000FF1CE}_Office14.SingleImage_{61A3A423-93E5-467D-80F1-B5EC686474D0}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2566458) (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.SingleImage_{A6C194EA-C6CB-4314-9E43-AD1F4A1E9D74}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{79C725A1-3964-421C-A528-78C1C083C7C7}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{95BE5D45-A3DD-4CB1-8C35-D75DD7B4D862}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.SingleImage_{95BE5D45-A3DD-4CB1-8C35-D75DD7B4D862}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{EBD18DE5-BC84-4B57-9A30-097044871F9A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{4AD36582-256B-433D-8593-F31773A15CA4}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.SingleImage_{4AD36582-256B-433D-8593-F31773A15CA4}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{F216169C-2B40-429B-8370-B5BA06EC5423}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.SingleImage_{F216169C-2B40-429B-8370-B5BA06EC5423}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{B6AD7E27-012A-4B63-82BA-AF62893E5435}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2767886) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{204B60A2-CCEA-4075-9F58-B7BC1BA5E742}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{07DC9C6C-E916-4F42-8677-716930ED0393}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2837583) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{FF62F7C1-9491-457C-BBAE-DBC6FD1DB968}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2837583) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.SingleImage_{FF62F7C1-9491-457C-BBAE-DBC6FD1DB968}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 64-Bit Edition (HKLM\...\{90140000-001F-0407-1000-0000000FF1CE}_Office14.SingleImage_{64D96F30-CF4C-4CCE-AAF2-F8909348BF35}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 64-Bit Edition (HKLM\...\{90140000-001F-0409-1000-0000000FF1CE}_Office14.SingleImage_{BA61259D-63F0-4177-A0E1-E4064EC2B470}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 64-Bit Edition (HKLM\...\{90140000-001F-040C-1000-0000000FF1CE}_Office14.SingleImage_{9F6507AC-7D8F-46C1-B90F-59C7828E0E0D}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 64-Bit Edition (HKLM\...\{90140000-001F-0410-1000-0000000FF1CE}_Office14.SingleImage_{B2508D75-61CF-4CC0-84C0-CF257219201D}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2553290) 64-Bit Edition (HKLM\...\{90140000-00A1-0407-1000-0000000FF1CE}_Office14.SingleImage_{AA344E1A-06FE-4EA1-8040-A3AA2A3A87EF}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{3029C408-1DD1-4273-8E58-87CB1B638FC8}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.SingleImage_{3029C408-1DD1-4273-8E58-87CB1B638FC8}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 64-Bit Edition (HKLM\...\{90140000-001A-0407-1000-0000000FF1CE}_Office14.SingleImage_{6164E0E5-C903-488C-93AF-1B7AF7EBC331}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{DDDC32A5-9528-4771-B91A-97A8E1D7957B}) (Version:  - Microsoft)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 64-Bit Edition (HKLM\...\{90140000-001A-0407-1000-0000000FF1CE}_Office14.SingleImage_{EE34F250-0C70-4774-82A8-B1EAAEB89991}) (Version:  - Microsoft)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{7861C766-2AA2-4A50-AB75-A57D451CEA76}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 64-Bit Edition (HKLM\...\{90140000-0018-0407-1000-0000000FF1CE}_Office14.SingleImage_{BEA3259E-14B5-4D89-87FF-ED9F1D0D81C8}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2775360) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{BE1D254A-E5CD-4E76-9BE8-7B2E5FDBA6AF}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 64-Bit Edition (HKLM\...\{90140000-0043-0000-1000-0000000FF1CE}_Office14.SingleImage_{77374F16-2DC6-4EEF-AFAD-C59FDA2E010D}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 64-Bit Edition (HKLM\...\{90140000-003D-0000-1000-0000000FF1CE}_Office14.SingleImage_{DF33B92A-5381-4F03-AB54-2D67086B357E}) (Version:  - Microsoft)
Visitenkarten in 2 Minuten (HKLM-x32\...\Visitenkarten in 2 Minuten) (Version:  - )
VLC media player 2.1.0 (HKLM\...\VLC media player) (Version: 2.1.0 - VideoLAN)
Waves Complete V9r15 (HKLM-x32\...\{91000001-C561-4E32-99EB-3C5AD3683A70}) (Version: 9.1.15 - Waves)
Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
WinWrap Basic v9.1 (x86) Utility (HKLM-x32\...\{C9F15C7B-8ECB-49C4-9343-44C191AB515B}) (Version: 1.0.0 - Polar Engineering)
ZoneAlarm Firewall (x32 Version: 11.0.780.000 - Check Point Software Technologies Ltd.) Hidden
ZoneAlarm Free Firewall (HKLM-x32\...\ZoneAlarm Free Firewall) (Version: 11.0.780.000 - Check Point)
ZoneAlarm Security (x32 Version: 11.0.780.000 - Check Point Software Technologies Ltd.) Hidden

==================== Restore Points  =========================

02-03-2014 18:55:38 Gerätetreiber-Paketinstallation: M-Audio Audio-, Video- und Gamecontroller
02-03-2014 19:48:23 Gerätetreiber-Paketinstallation: Anchorfree Inc Netzwerkdienst
02-03-2014 19:48:45 Gerätetreiber-Paketinstallation: Anchorfree HSS VPN Adapter Netzwerkadapter
03-03-2014 18:18:10 Windows-Sicherung
22-03-2014 13:21:28 avast! antivirus system restore point
05-04-2014 15:54:51 Windows-Sicherung
03-05-2014 09:49:25 Windows-Sicherung
28-05-2014 16:12:25 avast! antivirus system restore point
01-06-2014 10:59:17 Installed Java 7 Update 60

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05409B7D-2CC6-498C-BAAB-E22BA23337AF} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-05-28] (AVAST Software)
Task: {130D1FF4-7E88-477C-808C-ABE955F2AFF6} - System32\Tasks\GoforFilesUpdate => C:\Program Files (x86)\GoforFiles\GFFUpdater.exe <==== ATTENTION
Task: {1D48AA5B-5A38-451D-AAAA-777612ED59A7} - System32\Tasks\{60E79BB5-C92A-43F9-B6D5-3EA806C06F33} => C:\Users\Michael Pfandler\Desktop\MISE.exe
Task: {82468526-B514-48D5-B3D8-854B48FD9202} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe
Task: {92A9C5A1-02B9-474C-8821-B9E7B4293FC2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2301571512-4160980396-1932910602-1000UA => C:\Users\Michael Pfandler\AppData\Local\Google\Update\GoogleUpdate.exe [2014-02-03] (Google Inc.)
Task: {9D5E563F-B329-469C-B635-94B12780BF5C} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {A0A7E8F3-6912-4AF5-8EE7-62E118D701E5} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {C0889326-6EDB-4145-A541-1CC277B32239} - System32\Tasks\Express FilesUpdate => C:\Program Files (x86)\ExpressFiles\EFUpdater.exe <==== ATTENTION
Task: {C860AF5C-FC32-414C-AB6E-34446E131585} - System32\Tasks\Digital Sites => C:\Users\MICHAE~1\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {CD8F0A84-6736-4ACC-B81C-4FBEAE95C9B5} - System32\Tasks\{AB44C86E-477D-40B7-A33D-A2781E3AF8F4} => C:\Users\Michael Pfandler\Desktop\MISE.exe
Task: {DF3D8AFD-E5E1-4EA8-B90B-D672151BD7B4} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2301571512-4160980396-1932910602-1000Core => C:\Users\Michael Pfandler\AppData\Local\Google\Update\GoogleUpdate.exe [2014-02-03] (Google Inc.)
Task: {F4473CD3-371F-4835-8AC6-9A33573F8256} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: C:\windows\Tasks\Digital Sites.job => C:\Users\MICHAE~1\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2301571512-4160980396-1932910602-1000Core.job => C:\Users\Michael Pfandler\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2301571512-4160980396-1932910602-1000UA.job => C:\Users\Michael Pfandler\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe

==================== Loaded Modules (whitelisted) =============

2013-01-17 12:36 - 2012-12-26 07:38 - 00104960 ____N () C:\Program Files (x86)\ThinkPad\Utilities\GR\PWMRT64V.DLL
2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2013-01-03 16:50 - 2012-03-07 00:49 - 00128280 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
2013-01-03 16:41 - 2010-10-26 06:40 - 00049056 _____ () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
2012-09-19 12:07 - 2012-06-25 08:19 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-06-01 21:47 - 2014-06-01 21:47 - 00050477 _____ () C:\Users\Michael Pfandler\Desktop\Defogger.exe
2012-10-17 19:30 - 2012-10-17 19:30 - 00062968 _____ () C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll
2014-01-06 19:28 - 2014-01-06 19:28 - 02259456 _____ () C:\Program Files\AVAST Software\Avast\defs\14060101\algo.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 20:58 - 2014-02-12 20:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-01-27 10:11 - 2014-01-27 10:11 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2007-03-29 13:17 - 2007-03-29 13:17 - 00106496 _____ () C:\Program Files (x86)\Keyboard & Mouse Driver\keydll.dll
2008-06-16 10:06 - 2008-06-16 10:06 - 00053248 _____ () C:\Program Files (x86)\Keyboard & Mouse Driver\MouseHook.dll
2013-05-25 15:27 - 2014-06-01 12:36 - 03839088 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-01-03 16:50 - 2012-03-07 00:27 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Michael Pfandler\AppData\Local\GkyGRgMwTA:2QeyNPESHjHoATQEifqWH5ng
AlternateDataStreams: C:\Users\Michael Pfandler\AppData\Local\Mw8cnZgHnm:qNzeOoVlr23ZnpOamwgEmkq
AlternateDataStreams: C:\Users\Michael Pfandler\AppData\Local\pd6ewjNs:a0wPcm9wK0PrEcAptHsxkBw2C7xO
AlternateDataStreams: C:\Users\Michael Pfandler\AppData\Local\Temporary Internet Files:12eRzpwGF9cVKXnpxl47DP
AlternateDataStreams: C:\Users\Michael Pfandler\AppData\Local\UBYEjS9ESxW:QhmqZolwyDXx8pO8AqaXv5

==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: IJPLMSVC => 2
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: Polar Daemon => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: TomTomHOMEService => 2
MSCONFIG\Services: UleadBurningHelper => 2
MSCONFIG\Services: Yontoo Desktop Updater => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Google Calendar Sync.lnk => C:\windows\pss\Google Calendar Sync.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Polar WebSync.lnk => C:\windows\pss\Polar WebSync.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: CanonMyPrinter => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
MSCONFIG\startupreg: CanonSolutionMenuEx => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
MSCONFIG\startupreg: cAudioFilterAgent => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe
MSCONFIG\startupreg: Cisco AnyConnect Secure Mobility Agent for Windows => "C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" -minimized
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: PDFPrint => C:\Program Files (x86)\PDF24\pdf24.exe
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" -s
MSCONFIG\startupreg: Yontoo Desktop => "C:\Users\Michael Pfandler\AppData\Roaming\Yontoo\YontooDesktop.exe"

==================== Faulty Device Manager Devices =============

Could not list Devices. Check "winmgmt" service or repair WMI.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/01/2014 09:42:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: mediasrv.exe, Version: 2.1.0.138, Zeitstempel: 0x4f17cc3a
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0003332f
ID des fehlerhaften Prozesses: 0x16c0
Startzeit der fehlerhaften Anwendung: 0xmediasrv.exe0
Pfad der fehlerhaften Anwendung: mediasrv.exe1
Pfad des fehlerhaften Moduls: mediasrv.exe2
Berichtskennung: mediasrv.exe3

Error: (06/01/2014 09:14:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: obexsrv.exe, Version: 2.0.0.128, Zeitstempel: 0x4ed5d3d0
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00033633
ID des fehlerhaften Prozesses: 0xd8c
Startzeit der fehlerhaften Anwendung: 0xobexsrv.exe0
Pfad der fehlerhaften Anwendung: obexsrv.exe1
Pfad des fehlerhaften Moduls: obexsrv.exe2
Berichtskennung: obexsrv.exe3

Error: (06/01/2014 02:52:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: obexsrv.exe, Version: 2.0.0.128, Zeitstempel: 0x4ed5d3d0
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00033633
ID des fehlerhaften Prozesses: 0xdd0
Startzeit der fehlerhaften Anwendung: 0xobexsrv.exe0
Pfad der fehlerhaften Anwendung: obexsrv.exe1
Pfad des fehlerhaften Moduls: obexsrv.exe2
Berichtskennung: obexsrv.exe3

Error: (06/01/2014 02:48:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ProTools.exe, Version: 11.1.0.181, Zeitstempel: 0x52b04869
Name des fehlerhaften Moduls: StructuredQuery.dll, Version: 7.0.7601.17514, Zeitstempel: 0x4ce7c9c7
Ausnahmecode: 0xc0000409
Fehleroffset: 0x000000000006c88f
ID des fehlerhaften Prozesses: 0x14c8
Startzeit der fehlerhaften Anwendung: 0xProTools.exe0
Pfad der fehlerhaften Anwendung: ProTools.exe1
Pfad des fehlerhaften Moduls: ProTools.exe2
Berichtskennung: ProTools.exe3

Error: (06/01/2014 02:21:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: obexsrv.exe, Version: 2.0.0.128, Zeitstempel: 0x4ed5d3d0
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00033633
ID des fehlerhaften Prozesses: 0xdd8
Startzeit der fehlerhaften Anwendung: 0xobexsrv.exe0
Pfad der fehlerhaften Anwendung: obexsrv.exe1
Pfad des fehlerhaften Moduls: obexsrv.exe2
Berichtskennung: obexsrv.exe3

Error: (05/31/2014 09:04:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ProTools.exe, Version: 11.1.0.181, Zeitstempel: 0x52b04869
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24
Ausnahmecode: 0xc0000374
Fehleroffset: 0x00000000000c4102
ID des fehlerhaften Prozesses: 0xc38
Startzeit der fehlerhaften Anwendung: 0xProTools.exe0
Pfad der fehlerhaften Anwendung: ProTools.exe1
Pfad des fehlerhaften Moduls: ProTools.exe2
Berichtskennung: ProTools.exe3

Error: (05/30/2014 10:01:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: obexsrv.exe, Version: 2.0.0.128, Zeitstempel: 0x4ed5d3d0
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00033633
ID des fehlerhaften Prozesses: 0xdb0
Startzeit der fehlerhaften Anwendung: 0xobexsrv.exe0
Pfad der fehlerhaften Anwendung: obexsrv.exe1
Pfad des fehlerhaften Moduls: obexsrv.exe2
Berichtskennung: obexsrv.exe3

Error: (05/30/2014 07:08:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: obexsrv.exe, Version: 2.0.0.128, Zeitstempel: 0x4ed5d3d0
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00033633
ID des fehlerhaften Prozesses: 0xd00
Startzeit der fehlerhaften Anwendung: 0xobexsrv.exe0
Pfad der fehlerhaften Anwendung: obexsrv.exe1
Pfad des fehlerhaften Moduls: obexsrv.exe2
Berichtskennung: obexsrv.exe3

Error: (05/30/2014 05:31:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: obexsrv.exe, Version: 2.0.0.128, Zeitstempel: 0x4ed5d3d0
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00033633
ID des fehlerhaften Prozesses: 0xd90
Startzeit der fehlerhaften Anwendung: 0xobexsrv.exe0
Pfad der fehlerhaften Anwendung: obexsrv.exe1
Pfad des fehlerhaften Moduls: obexsrv.exe2
Berichtskennung: obexsrv.exe3

Error: (05/29/2014 08:58:18 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WavesQtLibs_4.7.3_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0"1". Fehler in Manifest- oder Richtliniendatei "WavesQtLibs_4.7.3_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0"2" in Zeile  WavesQtLibs_4.7.3_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WavesQtLibs_4.7.3_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0".
Definition: WavesQtLibs_4.7.3_Win32_Release,processorArchitecture="x86",type="win32",version="1.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.


System errors:
=============
Error: (06/01/2014 09:45:52 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde nicht richtig gestartet.

Error: (06/01/2014 09:44:18 PM) (Source: BROWSER) (EventID: 8032) (User: )
Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{61FBD897-1A49-48B5-A14D-C3708C49C5EA}" zu oft fehl.
Der Sicherungssuchdienst wird beendet.

Error: (06/01/2014 09:42:56 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Bluetooth Media Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (06/01/2014 09:41:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Update Rock Turner" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (06/01/2014 09:39:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Update Rock Turner" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (06/01/2014 09:39:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Update Rock Turner" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (06/01/2014 09:17:25 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde nicht richtig gestartet.

Error: (06/01/2014 09:15:48 PM) (Source: BROWSER) (EventID: 8032) (User: )
Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{61FBD897-1A49-48B5-A14D-C3708C49C5EA}" zu oft fehl.
Der Sicherungssuchdienst wird beendet.

Error: (06/01/2014 09:14:04 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Bluetooth OBEX Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (06/01/2014 09:13:44 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst nvsvc erreicht.


Microsoft Office Sessions:
=========================
Error: (06/01/2014 09:42:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mediasrv.exe2.1.0.1384f17cc3antdll.dll6.1.7601.18247521ea8e7c00000050003332f16c001cf7dd198b153b9C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exeC:\windows\SysWOW64\ntdll.dlled4bdffd-e9c4-11e3-819f-84a6c87aaf7a

Error: (06/01/2014 09:14:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: obexsrv.exe2.0.0.1284ed5d3d0ntdll.dll6.1.7601.18247521ea8e7c000000500033633d8c01cf7dcd8b15d142C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exeC:\windows\SysWOW64\ntdll.dlle4e34ce1-e9c0-11e3-85c2-84a6c87aaf7a

Error: (06/01/2014 02:52:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: obexsrv.exe2.0.0.1284ed5d3d0ntdll.dll6.1.7601.18247521ea8e7c000000500033633dd001cf7d983681e1c5C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exeC:\windows\SysWOW64\ntdll.dll99f82187-e98b-11e3-b26e-84a6c87aaf7a

Error: (06/01/2014 02:48:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: ProTools.exe11.1.0.18152b04869StructuredQuery.dll7.0.7601.175144ce7c9c7c0000409000000000006c88f14c801cf7d95fed51c88C:\Program Files\Avid\Pro Tools\ProTools.exeC:\windows\System32\StructuredQuery.dll09e5aff3-e98b-11e3-9908-84a6c87aaf7a

Error: (06/01/2014 02:21:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: obexsrv.exe2.0.0.1284ed5d3d0ntdll.dll6.1.7601.18247521ea8e7c000000500033633dd801cf7d93edfd4356C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exeC:\windows\SysWOW64\ntdll.dll52701f7d-e987-11e3-9908-84a6c87aaf7a

Error: (05/31/2014 09:04:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: ProTools.exe11.1.0.18152b04869ntdll.dll6.1.7601.18247521eaf24c000037400000000000c4102c3801cf7cf371f4f60cC:\Program Files\Avid\Pro Tools\ProTools.exeC:\windows\SYSTEM32\ntdll.dll5904fdee-e8f6-11e3-91a7-84a6c87aaf7a

Error: (05/30/2014 10:01:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: obexsrv.exe2.0.0.1284ed5d3d0ntdll.dll6.1.7601.18247521ea8e7c000000500033633db001cf7c41ce3cd06dC:\Program Files (x86)\Intel\Bluetooth\obexsrv.exeC:\windows\SysWOW64\ntdll.dll33fced3b-e835-11e3-b106-84a6c87aaf7a

Error: (05/30/2014 07:08:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: obexsrv.exe2.0.0.1284ed5d3d0ntdll.dll6.1.7601.18247521ea8e7c000000500033633d0001cf7c29a5910eaaC:\Program Files (x86)\Intel\Bluetooth\obexsrv.exeC:\windows\SysWOW64\ntdll.dllf7239a55-e81c-11e3-b4c0-84a6c87aaf7a

Error: (05/30/2014 05:31:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: obexsrv.exe2.0.0.1284ed5d3d0ntdll.dll6.1.7601.18247521ea8e7c000000500033633d9001cf7c1c0895d84dC:\Program Files (x86)\Intel\Bluetooth\obexsrv.exeC:\windows\SysWOW64\ntdll.dll6d1df9c6-e80f-11e3-b5be-84a6c87aaf7a

Error: (05/29/2014 08:58:18 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: WavesQtLibs_4.7.3_Win32_Release,processorArchitecture="AMD64",type="win32",version="1.0.0.0"WavesQtLibs_4.7.3_Win32_Release,processorArchitecture="x86",type="win32",version="1.0.0.0"C:\Program Files (x86)\Waves\Applications\GTR 3.5.exeC:\Program Files (x86)\Waves\Applications\WavesQtLibs_4.7.3_Win32_Release\WavesQtLibs_4.7.3_Win32_Release.MANIFEST8


CodeIntegrity Errors:
===================================
  Date: 2013-05-02 22:53:44.220
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-05-02 22:53:44.171
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-05-02 22:53:44.114
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\gpapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-05-02 22:53:44.064
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\gpapi.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-03-17 18:57:39.682
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-03-17 18:57:39.627
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-03-17 18:57:39.571
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-03-17 18:57:39.482
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-03-17 18:57:39.415
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-03-17 18:57:39.335
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\cryptnet.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 31%
Total physical RAM: 7785.77 MB
Available physical RAM: 5329.02 MB
Total Pagefile: 15569.71 MB
Available Pagefile: 12780.61 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: (Volume) (Fixed) (Total:236.52 GB) (Free:115.72 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Data) (Fixed) (Total:698.63 GB) (Free:234.51 GB) NTFS
Drive h: (SYSTEM_DRV) (Fixed) (Total:1.95 GB) (Free:1.61 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238 GB) (Disk ID: 067C097F)
Partition 1: (Active) - (Size=237 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=2 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: 525C4AB3)
Partition 1: (Not Active) - (Size=699 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

hi,

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Hallo schrauber,

vielen Dank für deine schnelle Antwort!
Ich habe jetzt alles so durchgeführt, wie du es geschrieben hast. Nach dem Scan mit MBAM hat der Neustart ziemlich lange gedauert (ca. 5 Minuten oder so). Ich hab den Laptop einfach laufen lassen, irgendwann ging´s dann. Aber beim Rauffahren von Windows gab´s eine Fehlermeldung, dass der Neustart nicht einwandfrei geklappt hat. Es gab dann aber keine weiteren Probleme.

Hier die logs:

mbam:

 Malwarebytes Anti-Malware 
www.malwarebytes.org


Update, 01.06.2014 22:59:09, SYSTEM, THINKPAD, Manual, Rootkit Database, 2014.2.20.1, 2014.5.21.1, 
Update, 01.06.2014 22:59:18, SYSTEM, THINKPAD, Manual, Malware Database, 2014.3.4.9, 2014.6.1.8, 

(end)
         

adwcleaner:

# AdwCleaner v3.211 - Bericht erstellt am 01/06/2014 um 23:24:42
# Aktualisiert 26/05/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Michael Pfandler - THINKPAD
# Gestartet von : C:\Users\Michael Pfandler\Desktop\adwcleaner_3.211.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\Program Files (x86)\SupTab
Ordner Gelöscht : C:\Users\Michael Pfandler\AppData\Local\lollipop
Ordner Gelöscht : C:\Users\Michael Pfandler\AppData\Local\Mobogenie
Ordner Gelöscht : C:\Users\MICHAE~1\AppData\Local\Temp\hotspot shield
Ordner Gelöscht : C:\Users\MICHAE~1\AppData\Local\Temp\mt_ffx
Ordner Gelöscht : C:\Users\Michael Pfandler\AppData\LocalLow\Delta
Ordner Gelöscht : C:\Users\Michael Pfandler\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Michael Pfandler\AppData\Roaming\DigitalSites
Ordner Gelöscht : C:\Users\Michael Pfandler\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Michael Pfandler\AppData\Roaming\ExpressFiles
Ordner Gelöscht : C:\Users\Michael Pfandler\AppData\Roaming\goforfiles
Ordner Gelöscht : C:\Users\Michael Pfandler\AppData\Roaming\SupTab
Ordner Gelöscht : C:\Users\Michael Pfandler\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Michael Pfandler\Documents\Mobogenie
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Users\Michael Pfandler\daemonprocess.txt
Datei Gelöscht : C:\Users\MICHAE~1\AppData\Local\Temp\Uninstall.exe
Datei Gelöscht : C:\Users\Michael Pfandler\AppData\Roaming\Mozilla\Firefox\Profiles\tjkcd753.default-1401650072905\user.js
Datei Gelöscht : C:\windows\Tasks\Digital Sites.job
Datei Gelöscht : C:\windows\System32\Tasks\Digital Sites
Datei Gelöscht : C:\windows\System32\Tasks\Express FilesUpdate
Datei Gelöscht : C:\windows\System32\Tasks\GoforFilesUpdate

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\babylon.com
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\*\shell\filescout
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabMaint_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabMaint_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\GoforFiles_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\GoforFiles_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\YontooDesktop_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\YontooDesktop_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Schlüssel Gelöscht : HKCU\Software\8ede8cb368ed12
Schlüssel Gelöscht : HKLM\SOFTWARE\8ede8cb368ed12
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\anchorfree
Schlüssel Gelöscht : HKCU\Software\BabSolution
Schlüssel Gelöscht : HKCU\Software\dsiteproducts
Schlüssel Gelöscht : HKCU\Software\ExpressFiles
Schlüssel Gelöscht : HKCU\Software\filescout
Schlüssel Gelöscht : HKCU\Software\GoforFiles
Schlüssel Gelöscht : HKCU\Software\lollipop
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\Software\ExpressFiles
Schlüssel Gelöscht : HKLM\Software\GoforFiles
Schlüssel Gelöscht : HKLM\Software\IePlugin
Schlüssel Gelöscht : HKLM\Software\SupTab
Schlüssel Gelöscht : HKLM\Software\supWPM
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : HKLM\Software\Wpm
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Tarma Installer

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16521

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Mozilla Firefox v29.0.1 (de)

[ Datei : C:\Users\Michael Pfandler\AppData\Roaming\Mozilla\Firefox\Profiles\tjkcd753.default-1401650072905\prefs.js ]


*************************

AdwCleaner[R0].txt - [6972 octets] - [01/06/2014 23:22:35]
AdwCleaner[S0].txt - [6110 octets] - [01/06/2014 23:24:42]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6170 octets] ##########
         

jrt:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Michael Pfandler on 01.06.2014 at 23:28:14,56
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2301571512-4160980396-1932910602-1000\Software\sweetim



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 01.06.2014 at 23:34:58,98
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

frisches frst:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-06-2014 01
Ran by Michael Pfandler (administrator) on THINKPAD on 01-06-2014 23:37:22
Running from C:\Users\Michael Pfandler\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(M-Audio) C:\Program Files (x86)\M-Audio\Axiom AIR Mini 32\AudioDevMon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(UASSOFT.COM) C:\Program Files (x86)\Keyboard & Mouse Driver\KMWDSrv.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Check Point Software Technologies, Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(KORG Inc.) C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlk.exe
(UASSOFT.COM) C:\Program Files (x86)\Keyboard & Mouse Driver\StartAutorun.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\mkrmsg.exe
(UASSOFT.COM) C:\Program Files (x86)\Keyboard & Mouse Driver\KMCONFIG.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(UASSOFT.COM) C:\Program Files (x86)\Keyboard & Mouse Driver\KMProcess.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1654400 2012-02-21] (Conexant Systems, Inc.)
HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [178960 2012-03-15] (Intel Corporation)
HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [11407120 2012-03-27] (Intel Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2881336 2012-06-19] (Synaptics Incorporated)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [507744 2011-12-20] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [RotateImage] => C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-30] (Ricoh co.,Ltd.)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133400 2012-03-07] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-04-13] (Intel Corporation)
HKLM-x32\...\Run: [PWMTRV] => rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3888648 2014-05-28] (AVAST Software)
HKLM-x32\...\Run: [KORG USB-MIDI Driver] => C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe [393656 2012-10-05] (KORG Inc.)
HKLM-x32\...\Run: [KMCONFIG] => C:\Program Files (x86)\Keyboard & Mouse Driver\StartAutorun.exe KMConfig.exe
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2301571512-4160980396-1932910602-1000\...\Run: [Google Update] => C:\Users\Michael Pfandler\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-02-03] (Google Inc.)
HKU\S-1-5-21-2301571512-4160980396-1932910602-1000\...\MountPoints2: {aee08898-625c-11e2-806d-62fd4dec07f5} - "I:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-2301571512-4160980396-1932910602-1000\...\MountPoints2: {df044aab-2abe-11e3-9d4a-84a6c87aaf7a} - E:\LGAutoRun.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [260968 2012-06-10] (NVIDIA Corporation)
Startup: C:\Users\Michael Pfandler\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x3C19504DB9E9CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-at
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKCU - URL hxxp://www.trovigo.com/Results.aspx?gd=&ctid=CT3318522&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=5&UP=SPD6561716-A0AD-4916-8B8D-2A50BB997B95&q={searchTerms}&SSPV=
SearchScopes: HKCU - SuggestionsURL_JSON hxxp://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Michael Pfandler\AppData\Roaming\Mozilla\Firefox\Profiles\tjkcd753.default-1401650072905
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Michael Pfandler\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Michael Pfandler\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-01-04]
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-28] (AVAST Software)
R2 AxiomAIRMini32AudioDevMon; C:\Program Files (x86)\M-Audio\Axiom AIR Mini 32\AudioDevMon.exe [192360 2012-12-13] (M-Audio)
S3 digiSPTIService64; C:\Program Files\Avid\Pro Tools\digisptiservice64.exe [190464 2013-12-16] (Avid Technology, Inc.)
S4 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-03-07] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [163608 2012-03-07] (Intel Corporation)
R2 KMWDSERVICE; C:\Program Files (x86)\Keyboard & Mouse Driver\KMWDSrv.exe [1821184 2009-08-31] (UASSOFT.COM)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [133992 2011-07-12] (Lenovo Group Limited)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2012-02-26] ()
S4 Polar Daemon; C:\Program Files (x86)\Polar\Daemon\polard.exe [413184 2012-08-17] ()
R2 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe [54160 2013-06-18] (Check Point Software Technologies, Ltd.)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2669840 2012-02-26] (Intel® Corporation)
S2 Update Rock Turner; "C:\Program Files (x86)\Rock Turner\updateRockTurner.exe" [X]

==================== Drivers (Whitelisted) ====================

S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [29184 2012-07-03] (LG Electronics Inc.)
S3 AndNetDiag2; C:\Windows\System32\DRIVERS\lgandnetdiag264.sys [29184 2012-07-03] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [36352 2012-07-03] (LG Electronics Inc.)
S3 andnetndis; C:\Windows\System32\DRIVERS\lgandnetndis64.sys [93184 2012-07-04] (LG Electronics Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-05-28] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-05-28] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-05-28] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-05-28] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-05-28] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-05-28] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-05-28] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-12-19] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-05-28] ()
S3 AXIOMAIRMINI32; C:\Windows\System32\DRIVERS\MAudioAxiomAIRMini32.sys [134504 2012-12-13] (M-Audio)
S3 DGUSBAP; C:\Windows\System32\DRIVERS\dgmbx2.sys [194864 2011-02-13] (Avid Technology, Inc.)
S3 iLokDrvr; C:\Windows\System32\DRIVERS\iLokDrvr.sys [25808 2013-12-25] ()
S3 KORGUMDS; C:\Windows\System32\Drivers\KORGUM64.SYS [34136 2013-10-03] (KORG INC.)
S3 MBX2DFU; C:\Windows\System32\DRIVERS\dgmbx2fu.sys [32944 2011-02-13] (Avid Technology, Inc.)
S3 rig3avs; C:\Windows\System32\Drivers\rig3avs.sys [359784 2012-12-18] (Native Instruments GmbH)
S3 rig3usb_svc; C:\Windows\System32\Drivers\rig3usb.sys [100200 2012-12-18] (Native Instruments GmbH)
R3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [259688 2011-10-27] (Realtek Semiconductor Corp.)
R3 SmbDrvIntel; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [27448 2012-06-19] (Synaptics Incorporated)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-01-15] (Anchorfree Inc.)
U3 swmidi; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-01 23:34 - 2014-06-01 23:34 - 00000927 _____ () C:\Users\Michael Pfandler\Desktop\JRT.txt
2014-06-01 23:28 - 2014-06-01 23:28 - 00000000 ____D () C:\windows\ERUNT
2014-06-01 23:27 - 2014-06-01 23:27 - 01016261 _____ (Thisisu) C:\Users\Michael Pfandler\Desktop\JRT.exe
2014-06-01 23:26 - 2014-06-01 23:26 - 00006266 _____ () C:\Users\Michael Pfandler\Desktop\AdwCleaner[S0].txt
2014-06-01 23:22 - 2014-06-01 23:24 - 00000000 ____D () C:\AdwCleaner
2014-06-01 23:22 - 2014-06-01 23:22 - 01327971 _____ () C:\Users\Michael Pfandler\Desktop\adwcleaner_3.211.exe
2014-06-01 23:20 - 2014-06-01 23:20 - 00000260 _____ () C:\Users\Michael Pfandler\Desktop\mbam.txt
2014-06-01 23:17 - 2014-06-01 23:17 - 00725744 _____ () C:\windows\Minidump\060114-9126-01.dmp
2014-06-01 22:59 - 2014-06-01 23:18 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-01 22:58 - 2014-06-01 22:58 - 00001112 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-01 22:58 - 2014-06-01 22:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-01 22:58 - 2014-06-01 22:58 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-01 22:58 - 2014-06-01 22:58 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-01 22:58 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-06-01 22:58 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2014-06-01 22:58 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-06-01 22:02 - 2014-06-01 22:02 - 00600080 _____ () C:\Users\Michael Pfandler\Desktop\Gmer.txt
2014-06-01 21:52 - 2014-06-01 21:52 - 00380416 _____ () C:\Users\Michael Pfandler\Desktop\Gmer-19357.exe
2014-06-01 21:50 - 2014-06-01 23:37 - 00019797 _____ () C:\Users\Michael Pfandler\Desktop\FRST.txt
2014-06-01 21:50 - 2014-06-01 23:37 - 00000000 ____D () C:\FRST
2014-06-01 21:50 - 2014-06-01 21:51 - 00052733 _____ () C:\Users\Michael Pfandler\Desktop\Addition.txt
2014-06-01 21:49 - 2014-06-01 21:49 - 02067456 _____ (Farbar) C:\Users\Michael Pfandler\Desktop\FRST64.exe
2014-06-01 21:48 - 2014-06-01 21:48 - 00000494 _____ () C:\Users\Michael Pfandler\Desktop\defogger_disable.log
2014-06-01 21:48 - 2014-06-01 21:48 - 00000000 _____ () C:\Users\Michael Pfandler\defogger_reenable
2014-06-01 21:47 - 2014-06-01 21:47 - 00050477 _____ () C:\Users\Michael Pfandler\Desktop\Defogger.exe
2014-06-01 12:59 - 2014-06-01 12:59 - 00004387 _____ () C:\windows\SysWOW64\jupdate-1.7.0_60-b19.log
2014-06-01 12:59 - 2014-05-07 15:02 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2014-06-01 12:59 - 2014-05-07 14:59 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2014-06-01 12:59 - 2014-05-07 14:59 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2014-06-01 12:59 - 2014-05-07 14:58 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2014-05-29 19:51 - 2014-05-29 19:52 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-05-28 18:17 - 2014-05-28 18:16 - 00029208 _____ () C:\windows\system32\Drivers\aswHwid.sys
2014-05-28 18:16 - 2014-05-28 18:16 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr

==================== One Month Modified Files and Folders =======

2014-06-01 23:37 - 2014-06-01 21:50 - 00019797 _____ () C:\Users\Michael Pfandler\Desktop\FRST.txt
2014-06-01 23:37 - 2014-06-01 21:50 - 00000000 ____D () C:\FRST
2014-06-01 23:37 - 2013-01-03 13:56 - 00000000 ____D () C:\Users\Michael Pfandler\AppData\Local\Temp
2014-06-01 23:34 - 2014-06-01 23:34 - 00000927 _____ () C:\Users\Michael Pfandler\Desktop\JRT.txt
2014-06-01 23:34 - 2009-07-14 06:45 - 00015824 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-01 23:34 - 2009-07-14 06:45 - 00015824 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-01 23:33 - 2009-07-14 19:58 - 00654400 _____ () C:\windows\system32\perfh007.dat
2014-06-01 23:33 - 2009-07-14 19:58 - 00130240 _____ () C:\windows\system32\perfc007.dat
2014-06-01 23:33 - 2009-07-14 07:13 - 01498742 _____ () C:\windows\system32\PerfStringBackup.INI
2014-06-01 23:28 - 2014-06-01 23:28 - 00000000 ____D () C:\windows\ERUNT
2014-06-01 23:27 - 2014-06-01 23:27 - 01016261 _____ (Thisisu) C:\Users\Michael Pfandler\Desktop\JRT.exe
2014-06-01 23:26 - 2014-06-01 23:26 - 00006266 _____ () C:\Users\Michael Pfandler\Desktop\AdwCleaner[S0].txt
2014-06-01 23:25 - 2013-01-03 16:50 - 00000828 _____ () C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2014-06-01 23:25 - 2013-01-03 16:44 - 00206544 _____ () C:\windows\PFRO.log
2014-06-01 23:25 - 2013-01-03 13:56 - 01895878 _____ () C:\windows\WindowsUpdate.log
2014-06-01 23:25 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-06-01 23:25 - 2009-07-14 06:51 - 00112153 _____ () C:\windows\setupact.log
2014-06-01 23:24 - 2014-06-01 23:22 - 00000000 ____D () C:\AdwCleaner
2014-06-01 23:24 - 2013-01-03 13:56 - 00000000 ____D () C:\Users\Michael Pfandler
2014-06-01 23:22 - 2014-06-01 23:22 - 01327971 _____ () C:\Users\Michael Pfandler\Desktop\adwcleaner_3.211.exe
2014-06-01 23:20 - 2014-06-01 23:20 - 00000260 _____ () C:\Users\Michael Pfandler\Desktop\mbam.txt
2014-06-01 23:18 - 2014-06-01 22:59 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-01 23:17 - 2014-06-01 23:17 - 00725744 _____ () C:\windows\Minidump\060114-9126-01.dmp
2014-06-01 23:17 - 2013-10-14 20:05 - 843298326 _____ () C:\windows\MEMORY.DMP
2014-06-01 23:17 - 2013-10-14 20:05 - 00000000 ____D () C:\windows\Minidump
2014-06-01 22:58 - 2014-06-01 22:58 - 00001112 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-01 22:58 - 2014-06-01 22:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-01 22:58 - 2014-06-01 22:58 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-01 22:58 - 2014-06-01 22:58 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-01 22:41 - 2014-02-03 13:20 - 00001164 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2301571512-4160980396-1932910602-1000UA.job
2014-06-01 22:09 - 2013-01-19 20:25 - 00000000 ____D () C:\Users\Michael Pfandler\Documents\Outlook-Dateien
2014-06-01 22:02 - 2014-06-01 22:02 - 00600080 _____ () C:\Users\Michael Pfandler\Desktop\Gmer.txt
2014-06-01 21:52 - 2014-06-01 21:52 - 00380416 _____ () C:\Users\Michael Pfandler\Desktop\Gmer-19357.exe
2014-06-01 21:51 - 2014-06-01 21:50 - 00052733 _____ () C:\Users\Michael Pfandler\Desktop\Addition.txt
2014-06-01 21:49 - 2014-06-01 21:49 - 02067456 _____ (Farbar) C:\Users\Michael Pfandler\Desktop\FRST64.exe
2014-06-01 21:48 - 2014-06-01 21:48 - 00000494 _____ () C:\Users\Michael Pfandler\Desktop\defogger_disable.log
2014-06-01 21:48 - 2014-06-01 21:48 - 00000000 _____ () C:\Users\Michael Pfandler\defogger_reenable
2014-06-01 21:47 - 2014-06-01 21:47 - 00050477 _____ () C:\Users\Michael Pfandler\Desktop\Defogger.exe
2014-06-01 15:01 - 2013-10-18 09:41 - 00000000 ____D () C:\Users\Michael Pfandler\AppData\Roaming\vlc
2014-06-01 15:00 - 2013-12-25 15:31 - 00000000 ____D () C:\Users\Public\Pro Tools
2014-06-01 14:53 - 2014-02-24 18:31 - 00000016 _____ () C:\Users\Michael Pfandler\AppData\Roaming\msregsvv.dll
2014-06-01 14:53 - 2014-02-24 18:31 - 00000016 _____ () C:\ProgramData\autobk.inc
2014-06-01 14:53 - 2013-09-15 01:53 - 00000000 ___HD () C:\Users\Michael Pfandler\AppData\Local\UBYEjS9ESxW
2014-06-01 14:53 - 2013-03-30 21:45 - 00000000 ___HD () C:\Users\Michael Pfandler\AppData\Local\pd6ewjNs
2014-06-01 14:53 - 2012-12-13 10:17 - 00000000 ___HD () C:\Users\Michael Pfandler\AppData\Local\Mw8cnZgHnm
2014-06-01 14:53 - 2012-10-11 07:58 - 00000000 ___HD () C:\Users\Michael Pfandler\AppData\Local\GkyGRgMwTA
2014-06-01 14:20 - 2013-01-12 09:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-01 13:24 - 2013-05-16 22:27 - 00627200 ___SH () C:\Users\Michael Pfandler\Desktop\Thumbs.db
2014-06-01 13:00 - 2013-12-25 15:07 - 00000000 ____D () C:\ProgramData\Oracle
2014-06-01 12:59 - 2014-06-01 12:59 - 00004387 _____ () C:\windows\SysWOW64\jupdate-1.7.0_60-b19.log
2014-06-01 12:59 - 2013-12-25 15:07 - 00000000 ____D () C:\Program Files (x86)\Java
2014-06-01 12:36 - 2013-05-25 15:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-31 21:05 - 2009-07-14 07:08 - 00032640 _____ () C:\windows\Tasks\SCHEDLGU.TXT
2014-05-31 19:41 - 2014-02-03 13:20 - 00001112 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2301571512-4160980396-1932910602-1000Core.job
2014-05-31 15:45 - 2013-01-03 16:50 - 00000830 _____ () C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2014-05-29 19:52 - 2014-05-29 19:51 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-05-29 19:52 - 2013-05-20 10:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-05-29 19:51 - 2013-05-20 10:53 - 00000000 ____D () C:\Users\Michael Pfandler\AppData\Roaming\DVDVideoSoft
2014-05-29 00:35 - 2013-05-20 10:48 - 00000000 ____D () C:\Users\Michael Pfandler\AppData\Local\Windows Live
2014-05-28 18:17 - 2014-01-27 10:11 - 00085328 _____ (AVAST Software) C:\windows\system32\Drivers\aswstm.sys
2014-05-28 18:17 - 2013-01-04 18:03 - 01039096 _____ (AVAST Software) C:\windows\system32\Drivers\aswsnx.sys
2014-05-28 18:17 - 2013-01-04 18:03 - 00423240 _____ (AVAST Software) C:\windows\system32\Drivers\aswsp.sys
2014-05-28 18:17 - 2013-01-04 18:03 - 00003924 _____ () C:\windows\System32\Tasks\avast! Emergency Update
2014-05-28 18:16 - 2014-05-28 18:17 - 00029208 _____ () C:\windows\system32\Drivers\aswHwid.sys
2014-05-28 18:16 - 2014-05-28 18:16 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr
2014-05-28 18:16 - 2013-03-25 10:51 - 00208416 _____ () C:\windows\system32\Drivers\aswVmm.sys
2014-05-28 18:16 - 2013-03-25 10:51 - 00065776 _____ () C:\windows\system32\Drivers\aswRvrt.sys
2014-05-28 18:16 - 2013-01-04 18:03 - 00334648 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2014-05-28 18:16 - 2013-01-04 18:03 - 00093568 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2014-05-28 18:16 - 2013-01-04 18:03 - 00079184 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2014-05-12 07:26 - 2014-06-01 22:58 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-05-12 07:26 - 2014-06-01 22:58 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2014-05-12 07:25 - 2014-06-01 22:58 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-05-08 19:36 - 2014-02-03 13:20 - 00004156 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2301571512-4160980396-1932910602-1000UA
2014-05-08 19:36 - 2014-02-03 13:20 - 00003760 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2301571512-4160980396-1932910602-1000Core
2014-05-08 19:20 - 2014-01-10 16:40 - 00000000 ____D () C:\Sessions
2014-05-07 15:02 - 2014-06-01 12:59 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-07 14:59 - 2014-06-01 12:59 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2014-05-07 14:59 - 2014-06-01 12:59 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2014-05-07 14:58 - 2014-06-01 12:59 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2014-05-06 23:06 - 2013-01-04 19:29 - 00000000 ____D () C:\Users\Michael Pfandler\Desktop\Studium
2014-05-02 10:42 - 2013-01-07 09:43 - 00000000 ____D () C:\ProgramData\CanonIJPLM

Some content of TEMP:
====================
C:\Users\Michael Pfandler\AppData\Local\Temp\20130117011321321jniverify.dll
C:\Users\Michael Pfandler\AppData\Local\Temp\htmlayout.dll
C:\Users\Michael Pfandler\AppData\Local\Temp\ICReinstall_ZipExtractorSetup.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\jre-7u11-windows-i586-iftw.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Michael Pfandler\AppData\Local\Temp\Quarantine.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\Setup-C4.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Michael Pfandler\AppData\Local\Temp\sfamcc00002.dll
C:\Users\Michael Pfandler\AppData\Local\Temp\sfareca00001.dll
C:\Users\Michael Pfandler\AppData\Local\Temp\sfextra.dll
C:\Users\Michael Pfandler\AppData\Local\Temp\toolbar15798470.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\uninst1.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\uninstall15868764.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\uninstall27227696.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\uninstall27227728.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\YSPCUNLR.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-01 14:52

==================== End Of Log ============================
         

--- --- ---

--- --- ---


Danke und schönen Gruß
Michael

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Hallo schrauber,

hier die neuen Logs:

ESET:

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7587
# api_version=3.0.2
# EOSSerial=ba9a84693bbcc04a8a7e1c43b9e15498
# engine=18516
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2014-06-03 12:49:32
# local_time=2014-06-03 02:49:32 (+0100, Mitteleuropäische Sommerzeit)
# country="Austria"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 100 92 286929 166177062 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 4651725 153386422 0 0
# scanned=907181
# found=37
# cleaned=0
# scan_time=13500
sh=189FC4DEFBF3AF52775F7A922789A0CA6A8FF6F8 ft=1 fh=4ed2a41f68ba7620 vn="Variante von Win32/Thinknice.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SupTab\SupTab.dll.vir"
sh=410B32FD3FE4642644AD91AC60C69B86EC2762DD ft=1 fh=0e378a435beab91a vn="Variante von Win32/Adware.Yontoo.B Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll.vir"
sh=D466CE5076CDBA688A4C4FAFE614E0EAFCCF0086 ft=0 fh=0000000000000000 vn="Win32/bProtector.F evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Michael Pfandler\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6GCW465R\pack[1].7z"
sh=AC76360969B4C1DEABBF392242705FF7A8BF5922 ft=0 fh=0000000000000000 vn="Win32/bProtector.F evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Michael Pfandler\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LWNEAO0L\pack[1].7z"
sh=11445FCF304B2043FF37461C4F34F492EE5BB19C ft=1 fh=21ba350e23674168 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\Michael Pfandler\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZGMHZG3U\yontoosetup[1].exe"
sh=3DE5DB55D73563AA3A7E52D36E1226DC4B5B2BDB ft=1 fh=c71c00117096a9df vn="Variante von Win32/InstallCore.OY evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Michael Pfandler\AppData\Local\Temp\ICReinstall_ZipExtractorSetup.exe"
sh=DA602313EC344E31F340105C29DF699267F73B84 ft=1 fh=34999f3f19837452 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\Michael Pfandler\AppData\Local\Temp\Setup-C4.exe"
sh=067D40AEFA9A224C7B18EAE8E06FE0CF611F6D4E ft=1 fh=79164116608e27d7 vn="Win32/OutBrowse.G evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Michael Pfandler\AppData\Local\Temp\toolbar15798470.exe"
sh=48F6B89C999D462EEA1B53B3031FCC80C43CE9C5 ft=1 fh=ab63e62deb57162e vn="Variante von Win32/YourFileDownloader.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Michael Pfandler\AppData\Local\Temp\uninstall15868764.exe"
sh=E47748B4868A190888D25917B91FEEAEBC905C89 ft=1 fh=6dd87b0de6ce835d vn="Win32/YourFileDownloader.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Michael Pfandler\AppData\Local\Temp\uninstall27227696.exe"
sh=2DAAB83B0439BC76845E58F3F7DDB84EE8E210C4 ft=1 fh=855a37aa5dbeb36f vn="Win32/InstallCore.PC evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Michael Pfandler\AppData\Local\Temp\1586202.Uninstall\uninstaller.exe"
sh=035EF1A19AFC0D423C85505DB17D2859FAC2250F ft=1 fh=b94a471135a3d38b vn="Variante von Win32/Toolbar.Babylon.I evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Michael Pfandler\AppData\Local\Temp\7CED96F3-BAB0-7891-8C4D-278AB3F6D7F8\BabMaint.exe"
sh=E2BA5F8A7BD2BAF32FF31730BAD873C8E7957030 ft=1 fh=6e8622963c31f56a vn="Variante von Win32/Toolbar.Babylon.P evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Michael Pfandler\AppData\Local\Temp\7CED96F3-BAB0-7891-8C4D-278AB3F6D7F8\BUSolution.dll"
sh=7759A3318DE2ABC3755EBB7F50322C6D586B5286 ft=1 fh=e3d39714b3bfb2a0 vn="Win32/Toolbar.Babylon.E evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Michael Pfandler\AppData\Local\Temp\7CED96F3-BAB0-7891-8C4D-278AB3F6D7F8\IEHelper.dll"
sh=20908C1205359A8545F570772106F6D72F666AC3 ft=1 fh=e61b6c9d961e4263 vn="Win32/Systweak.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Michael Pfandler\AppData\Local\Temp\is1590112554\1296713_stp\rcpsetup_adppi15_adppi15.exe"
sh=2DAAB83B0439BC76845E58F3F7DDB84EE8E210C4 ft=1 fh=855a37aa5dbeb36f vn="Win32/InstallCore.PC evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Michael Pfandler\AppData\Local\Temp\is1590112554\1297046_stp\uninstaller.exe"
sh=E0814D0F17EE1122F6D3507DC676030F8E1CC133 ft=1 fh=0e0f46db8e6ee8c4 vn="Win32/Toolbar.Babylon.I evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Michael Pfandler\AppData\Local\Temp\upd3708\BabMaint.x"
sh=7664F6A327E5201011200E703489577A0971AB77 ft=1 fh=c71c0011451c6a93 vn="Variante von Win32/Toolbar.Babylon.P evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Michael Pfandler\AppData\Local\Temp\upd3708\BUSolution.x"
sh=C25E453070C795849C94FCB0311ED1DDD4F7B74D ft=1 fh=a07ba6255bd749e6 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Michael Pfandler\AppData\Local\Temp\{907A1104-E812-4b5c-959B-E4DAB37A96AB}\CUninstallerZA.exe"
sh=28F81FA9CC2F237BB3DCB5F2D9E43DBB64E6CB34 ft=1 fh=51b4fcd41bbc33f1 vn="Win32/Toolbar.Montiera.I evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Michael Pfandler\AppData\Local\Temp\{907A1104-E812-4b5c-959B-E4DAB37A96AB}\zatb.exe"
sh=82BCBF182016396BB96B7641AAD1A80B11D2A3B8 ft=1 fh=aca5f2e24ca239d8 vn="Win32/Toolbar.Montiera.I evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Michael Pfandler\AppData\Local\Temp\{907A1104-E812-4b5c-959B-E4DAB37A96AB}\zonealarm_base.exe"
sh=1867142971E46CEFBDC91D1C32BDDB89B9CC2FCB ft=1 fh=bed49cb1acf2aab9 vn="Win32/DownWare.L evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Michael Pfandler\Desktop\Downloads\DTLite4471-0333.exe"
sh=AA955CE958A7C3B4DA5DBB544B2263D32C318EC4 ft=1 fh=a9fa6ecbcb990266 vn="Win32/OpenCandy potenziell unsichere Anwendung" ac=I fn="C:\Users\Michael Pfandler\Desktop\Downloads\Free3GPVideoConverter_5024430.exe"
sh=90574CE0C408184BB905A834DE3931F42BB51408 ft=1 fh=745d0d2101880beb vn="Win32/OpenCandy potenziell unsichere Anwendung" ac=I fn="C:\Users\Michael Pfandler\Desktop\Downloads\FreeAudioConverter_5.0.27.717.exe"
sh=57109D3ACFAC8456F6C83466E3FA48B7A29C2230 ft=1 fh=88f12dcc939a3469 vn="Win32/OpenCandy potenziell unsichere Anwendung" ac=I fn="C:\Users\Michael Pfandler\Desktop\Downloads\FreeYouTubeToMP3-35Converter.exe"
sh=74652BB55B35EAF701B7776753E34D36835EEC6E ft=1 fh=6b672c3a89b6e08f vn="Win32/OpenCandy potenziell unsichere Anwendung" ac=I fn="C:\Users\Michael Pfandler\Desktop\Downloads\FreeYouTubeToMP3Converter_3.12.2.430.exe"
sh=A3E1C3254E599505A71C7842AF34C87496B94827 ft=1 fh=beba3bd1b6161ebb vn="Win32/Toolbar.SearchSuite evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Michael Pfandler\Desktop\Downloads\iLividSetup-r390-n-bf.exe"
sh=8D7237A09D110E48E1EBC6D58CBE94674B1523B0 ft=1 fh=26a69e72d38eb914 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Michael Pfandler\Desktop\Downloads\zafwSetupWeb_110_780_000.exe"
sh=E78C73AFEC9CDD8DAAC5930F890340F5BA05ECC4 ft=0 fh=0000000000000000 vn="Variante von Win32/Adware.Yontoo.A Anwendung" ac=I fn="D:\THINKPAD\Backup Set 2013-01-06 095056\Backup Files 2013-05-06 082424\Backup files 2.zip"
sh=B01794FBA6A9A52760170687237AB3DBC7CEDB0B ft=0 fh=0000000000000000 vn="Variante von Win32/Adware.Yontoo.B Anwendung" ac=I fn="D:\THINKPAD\Backup Set 2013-01-06 095056\Backup Files 2013-05-06 082424\Backup files 3.zip"
sh=5B1528987648082841F918D347716C715755E015 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="D:\THINKPAD\Backup Set 2013-01-06 095056\Backup Files 2013-06-03 174341\Backup files 1.zip"
sh=196DEA9FB1863F00DE15A071610930A1FF6337D0 ft=0 fh=0000000000000000 vn="Variante von Win32/bProtector.J evtl. unerwünschte Anwendung" ac=I fn="D:\THINKPAD\Backup Set 2013-01-06 095056\Backup Files 2013-07-09 101034\Backup files 1.zip"
sh=7F7344CE141E7C38AE18AAD23A32B0FFCEE96615 ft=0 fh=0000000000000000 vn="Variante von Win32/Adware.Yontoo.A Anwendung" ac=I fn="D:\THINKPAD\Backup Set 2013-08-05 081419\Backup Files 2013-08-05 081419\Backup files 10.zip"
sh=F0B185A223807A03E3685AAB2A84242FCB7E55D7 ft=0 fh=0000000000000000 vn="Variante von Win32/bProtector.J evtl. unerwünschte Anwendung" ac=I fn="D:\THINKPAD\Backup Set 2013-08-05 081419\Backup Files 2013-08-05 081419\Backup files 11.zip"
sh=F94DBA2724DC9F8EE05F5744DE3F72DD99B0D67E ft=0 fh=0000000000000000 vn="Variante von Win32/Adware.Yontoo.B Anwendung" ac=I fn="D:\THINKPAD\Backup Set 2013-08-05 081419\Backup Files 2013-08-05 081419\Backup files 12.zip"
sh=C19BEB92FF6CABCB3D25CDFF11FA7574CD35ACFC ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="D:\THINKPAD\Backup Set 2013-08-05 081419\Backup Files 2013-08-05 081419\Backup files 6.zip"
sh=EEE3DF9D002120A6B5D082FA18AC6E2D1DC3AE41 ft=0 fh=0000000000000000 vn="Variante von Win32/Thinknice.B evtl. unerwünschte Anwendung" ac=I fn="D:\THINKPAD\Backup Set 2013-08-05 081419\Backup Files 2014-05-03 114917\Backup files 1.zip"
         

Security Check:

 Results of screen317's Security Check version 0.99.83  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 10 Out of date! 
``````````````Antivirus/Firewall Check:`````````````` 
avast! Antivirus   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Java 7 Update 60  
 Java version out of Date! 
  Adobe Flash Player 12.0.0.43 Flash Player out of Date!  
 Adobe Reader XI  
 Mozilla Firefox (29.0.1) 
````````Process Check: objlist.exe by Laurent````````  
 AVAST Software Avast AvastSvc.exe  
 AVAST Software Avast AvastUI.exe  
 CheckPoint ZoneAlarm ZAPrivacyService.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

frisches First:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-06-2014
Ran by Michael Pfandler (administrator) on THINKPAD on 03-06-2014 04:20:46
Running from C:\Users\Michael Pfandler\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(M-Audio) C:\Program Files (x86)\M-Audio\Axiom AIR Mini 32\AudioDevMon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(UASSOFT.COM) C:\Program Files (x86)\Keyboard & Mouse Driver\KMWDSrv.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Check Point Software Technologies, Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(KORG Inc.) C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe
(UASSOFT.COM) C:\Program Files (x86)\Keyboard & Mouse Driver\StartAutorun.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlk.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\mkrmsg.exe
(UASSOFT.COM) C:\Program Files (x86)\Keyboard & Mouse Driver\KMCONFIG.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE
(UASSOFT.COM) C:\Program Files (x86)\Keyboard & Mouse Driver\KMProcess.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1654400 2012-02-21] (Conexant Systems, Inc.)
HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [178960 2012-03-15] (Intel Corporation)
HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [11407120 2012-03-27] (Intel Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2881336 2012-06-19] (Synaptics Incorporated)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [507744 2011-12-20] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [RotateImage] => C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-30] (Ricoh co.,Ltd.)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133400 2012-03-07] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-04-13] (Intel Corporation)
HKLM-x32\...\Run: [PWMTRV] => rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3888648 2014-05-28] (AVAST Software)
HKLM-x32\...\Run: [KORG USB-MIDI Driver] => C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper2.exe [393656 2012-10-05] (KORG Inc.)
HKLM-x32\...\Run: [KMCONFIG] => C:\Program Files (x86)\Keyboard & Mouse Driver\StartAutorun.exe KMConfig.exe
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2301571512-4160980396-1932910602-1000\...\Run: [Google Update] => C:\Users\Michael Pfandler\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-02-03] (Google Inc.)
HKU\S-1-5-21-2301571512-4160980396-1932910602-1000\...\MountPoints2: {aee08898-625c-11e2-806d-62fd4dec07f5} - "I:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-2301571512-4160980396-1932910602-1000\...\MountPoints2: {df044aab-2abe-11e3-9d4a-84a6c87aaf7a} - E:\LGAutoRun.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [260968 2012-06-10] (NVIDIA Corporation)
Startup: C:\Users\Michael Pfandler\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x3C19504DB9E9CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-at
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKCU - URL hxxp://www.trovigo.com/Results.aspx?gd=&ctid=CT3318522&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=5&UP=SPD6561716-A0AD-4916-8B8D-2A50BB997B95&q={searchTerms}&SSPV=
SearchScopes: HKCU - SuggestionsURL_JSON hxxp://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Michael Pfandler\AppData\Roaming\Mozilla\Firefox\Profiles\tjkcd753.default-1401650072905
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Michael Pfandler\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Michael Pfandler\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-01-04]
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-28] (AVAST Software)
R2 AxiomAIRMini32AudioDevMon; C:\Program Files (x86)\M-Audio\Axiom AIR Mini 32\AudioDevMon.exe [192360 2012-12-13] (M-Audio)
S3 digiSPTIService64; C:\Program Files\Avid\Pro Tools\digisptiservice64.exe [190464 2013-12-16] (Avid Technology, Inc.)
S4 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-03-07] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [163608 2012-03-07] (Intel Corporation)
R2 KMWDSERVICE; C:\Program Files (x86)\Keyboard & Mouse Driver\KMWDSrv.exe [1821184 2009-08-31] (UASSOFT.COM)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [133992 2011-07-12] (Lenovo Group Limited)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2012-02-26] ()
S4 Polar Daemon; C:\Program Files (x86)\Polar\Daemon\polard.exe [413184 2012-08-17] ()
R2 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe [54160 2013-06-18] (Check Point Software Technologies, Ltd.)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2669840 2012-02-26] (Intel® Corporation)
S2 Update Rock Turner; "C:\Program Files (x86)\Rock Turner\updateRockTurner.exe" [X]

==================== Drivers (Whitelisted) ====================

S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [29184 2012-07-03] (LG Electronics Inc.)
S3 AndNetDiag2; C:\Windows\System32\DRIVERS\lgandnetdiag264.sys [29184 2012-07-03] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [36352 2012-07-03] (LG Electronics Inc.)
S3 andnetndis; C:\Windows\System32\DRIVERS\lgandnetndis64.sys [93184 2012-07-04] (LG Electronics Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-05-28] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-05-28] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-05-28] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-05-28] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-05-28] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-05-28] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-05-28] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-12-19] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-05-28] ()
R3 AXIOMAIRMINI32; C:\Windows\System32\DRIVERS\MAudioAxiomAIRMini32.sys [134504 2012-12-13] (M-Audio)
R3 DGUSBAP; C:\Windows\System32\DRIVERS\dgmbx2.sys [194864 2011-02-13] (Avid Technology, Inc.)
R3 iLokDrvr; C:\Windows\System32\DRIVERS\iLokDrvr.sys [25808 2013-12-25] ()
S3 KORGUMDS; C:\Windows\System32\Drivers\KORGUM64.SYS [34136 2013-10-03] (KORG INC.)
R3 MBX2DFU; C:\Windows\System32\DRIVERS\dgmbx2fu.sys [32944 2011-02-13] (Avid Technology, Inc.)
S3 rig3avs; C:\Windows\System32\Drivers\rig3avs.sys [359784 2012-12-18] (Native Instruments GmbH)
S3 rig3usb_svc; C:\Windows\System32\Drivers\rig3usb.sys [100200 2012-12-18] (Native Instruments GmbH)
R3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [259688 2011-10-27] (Realtek Semiconductor Corp.)
R3 SmbDrvIntel; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [27448 2012-06-19] (Synaptics Incorporated)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-01-15] (Anchorfree Inc.)
U3 swmidi; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-03 04:20 - 2014-06-03 04:20 - 00000936 _____ () C:\Users\Michael Pfandler\Desktop\checkup.txt
2014-06-03 04:20 - 2014-06-03 04:20 - 00000000 ____D () C:\Users\Michael Pfandler\Desktop\FRST-OlderVersion
2014-06-03 04:16 - 2014-06-03 04:16 - 00854367 _____ () C:\Users\Michael Pfandler\Desktop\SecurityCheck.exe
2014-06-03 04:11 - 2014-06-03 04:11 - 00009048 _____ () C:\Users\Michael Pfandler\Desktop\ESET.txt
2014-06-02 22:56 - 2014-06-02 22:57 - 02347384 _____ (ESET) C:\Users\Michael Pfandler\Desktop\esetsmartinstaller_deu.exe
2014-06-01 23:34 - 2014-06-01 23:34 - 00000927 _____ () C:\Users\Michael Pfandler\Desktop\JRT.txt
2014-06-01 23:28 - 2014-06-01 23:28 - 00000000 ____D () C:\windows\ERUNT
2014-06-01 23:27 - 2014-06-01 23:27 - 01016261 _____ (Thisisu) C:\Users\Michael Pfandler\Desktop\JRT.exe
2014-06-01 23:26 - 2014-06-01 23:26 - 00006266 _____ () C:\Users\Michael Pfandler\Desktop\AdwCleaner[S0].txt
2014-06-01 23:22 - 2014-06-01 23:24 - 00000000 ____D () C:\AdwCleaner
2014-06-01 23:22 - 2014-06-01 23:22 - 01327971 _____ () C:\Users\Michael Pfandler\Desktop\adwcleaner_3.211.exe
2014-06-01 23:20 - 2014-06-01 23:20 - 00000260 _____ () C:\Users\Michael Pfandler\Desktop\mbam.txt
2014-06-01 23:17 - 2014-06-01 23:17 - 00725744 _____ () C:\windows\Minidump\060114-9126-01.dmp
2014-06-01 22:59 - 2014-06-01 23:18 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-01 22:58 - 2014-06-01 22:58 - 00001112 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-01 22:58 - 2014-06-01 22:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-01 22:58 - 2014-06-01 22:58 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-01 22:58 - 2014-06-01 22:58 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-01 22:58 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-06-01 22:58 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2014-06-01 22:58 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-06-01 22:02 - 2014-06-01 22:02 - 00600080 _____ () C:\Users\Michael Pfandler\Desktop\Gmer.txt
2014-06-01 21:52 - 2014-06-01 21:52 - 00380416 _____ () C:\Users\Michael Pfandler\Desktop\Gmer-19357.exe
2014-06-01 21:50 - 2014-06-03 04:20 - 00019794 _____ () C:\Users\Michael Pfandler\Desktop\FRST.txt
2014-06-01 21:50 - 2014-06-03 04:20 - 00000000 ____D () C:\FRST
2014-06-01 21:50 - 2014-06-01 21:51 - 00052733 _____ () C:\Users\Michael Pfandler\Desktop\Addition.txt
2014-06-01 21:49 - 2014-06-03 04:20 - 02068992 _____ (Farbar) C:\Users\Michael Pfandler\Desktop\FRST64.exe
2014-06-01 21:48 - 2014-06-01 21:48 - 00000494 _____ () C:\Users\Michael Pfandler\Desktop\defogger_disable.log
2014-06-01 21:48 - 2014-06-01 21:48 - 00000000 _____ () C:\Users\Michael Pfandler\defogger_reenable
2014-06-01 21:47 - 2014-06-01 21:47 - 00050477 _____ () C:\Users\Michael Pfandler\Desktop\Defogger.exe
2014-06-01 12:59 - 2014-06-01 12:59 - 00004387 _____ () C:\windows\SysWOW64\jupdate-1.7.0_60-b19.log
2014-06-01 12:59 - 2014-05-07 15:02 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2014-06-01 12:59 - 2014-05-07 14:59 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2014-06-01 12:59 - 2014-05-07 14:59 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2014-06-01 12:59 - 2014-05-07 14:58 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2014-05-29 19:51 - 2014-05-29 19:52 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-05-28 18:17 - 2014-05-28 18:16 - 00029208 _____ () C:\windows\system32\Drivers\aswHwid.sys
2014-05-28 18:16 - 2014-05-28 18:16 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr

==================== One Month Modified Files and Folders =======

2014-06-03 04:20 - 2014-06-03 04:20 - 00000936 _____ () C:\Users\Michael Pfandler\Desktop\checkup.txt
2014-06-03 04:20 - 2014-06-03 04:20 - 00000000 ____D () C:\Users\Michael Pfandler\Desktop\FRST-OlderVersion
2014-06-03 04:20 - 2014-06-01 21:50 - 00019794 _____ () C:\Users\Michael Pfandler\Desktop\FRST.txt
2014-06-03 04:20 - 2014-06-01 21:50 - 00000000 ____D () C:\FRST
2014-06-03 04:20 - 2014-06-01 21:49 - 02068992 _____ (Farbar) C:\Users\Michael Pfandler\Desktop\FRST64.exe
2014-06-03 04:20 - 2013-01-03 13:56 - 00000000 ____D () C:\Users\Michael Pfandler\AppData\Local\Temp
2014-06-03 04:16 - 2014-06-03 04:16 - 00854367 _____ () C:\Users\Michael Pfandler\Desktop\SecurityCheck.exe
2014-06-03 04:11 - 2014-06-03 04:11 - 00009048 _____ () C:\Users\Michael Pfandler\Desktop\ESET.txt
2014-06-03 03:41 - 2014-02-03 13:20 - 00001164 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2301571512-4160980396-1932910602-1000UA.job
2014-06-02 23:01 - 2009-07-14 06:45 - 00015824 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-02 23:01 - 2009-07-14 06:45 - 00015824 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-02 22:57 - 2014-06-02 22:56 - 02347384 _____ (ESET) C:\Users\Michael Pfandler\Desktop\esetsmartinstaller_deu.exe
2014-06-02 22:57 - 2013-01-03 13:56 - 01954551 _____ () C:\windows\WindowsUpdate.log
2014-06-02 22:57 - 2009-07-14 19:58 - 00654400 _____ () C:\windows\system32\perfh007.dat
2014-06-02 22:57 - 2009-07-14 19:58 - 00130240 _____ () C:\windows\system32\perfc007.dat
2014-06-02 22:57 - 2009-07-14 07:13 - 01498742 _____ () C:\windows\system32\PerfStringBackup.INI
2014-06-02 22:52 - 2013-01-03 16:50 - 00000828 _____ () C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2014-06-02 22:52 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-06-02 22:52 - 2009-07-14 06:51 - 00112859 _____ () C:\windows\setupact.log
2014-06-02 22:51 - 2014-01-10 16:40 - 00000000 ____D () C:\Sessions
2014-06-02 22:50 - 2013-12-25 15:31 - 00000000 ____D () C:\Users\Public\Pro Tools
2014-06-02 21:49 - 2014-02-24 18:31 - 00000016 _____ () C:\Users\Michael Pfandler\AppData\Roaming\msregsvv.dll
2014-06-02 21:49 - 2014-02-24 18:31 - 00000016 _____ () C:\ProgramData\autobk.inc
2014-06-02 21:48 - 2013-09-15 01:53 - 00000000 ___HD () C:\Users\Michael Pfandler\AppData\Local\UBYEjS9ESxW
2014-06-02 21:48 - 2013-03-30 21:45 - 00000000 ___HD () C:\Users\Michael Pfandler\AppData\Local\pd6ewjNs
2014-06-02 21:48 - 2012-12-13 10:17 - 00000000 ___HD () C:\Users\Michael Pfandler\AppData\Local\Mw8cnZgHnm
2014-06-02 21:48 - 2012-10-11 07:58 - 00000000 ___HD () C:\Users\Michael Pfandler\AppData\Local\GkyGRgMwTA
2014-06-01 23:34 - 2014-06-01 23:34 - 00000927 _____ () C:\Users\Michael Pfandler\Desktop\JRT.txt
2014-06-01 23:28 - 2014-06-01 23:28 - 00000000 ____D () C:\windows\ERUNT
2014-06-01 23:27 - 2014-06-01 23:27 - 01016261 _____ (Thisisu) C:\Users\Michael Pfandler\Desktop\JRT.exe
2014-06-01 23:26 - 2014-06-01 23:26 - 00006266 _____ () C:\Users\Michael Pfandler\Desktop\AdwCleaner[S0].txt
2014-06-01 23:25 - 2013-01-03 16:44 - 00206544 _____ () C:\windows\PFRO.log
2014-06-01 23:24 - 2014-06-01 23:22 - 00000000 ____D () C:\AdwCleaner
2014-06-01 23:24 - 2013-01-03 13:56 - 00000000 ____D () C:\Users\Michael Pfandler
2014-06-01 23:22 - 2014-06-01 23:22 - 01327971 _____ () C:\Users\Michael Pfandler\Desktop\adwcleaner_3.211.exe
2014-06-01 23:20 - 2014-06-01 23:20 - 00000260 _____ () C:\Users\Michael Pfandler\Desktop\mbam.txt
2014-06-01 23:18 - 2014-06-01 22:59 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-01 23:17 - 2014-06-01 23:17 - 00725744 _____ () C:\windows\Minidump\060114-9126-01.dmp
2014-06-01 23:17 - 2013-10-14 20:05 - 843298326 _____ () C:\windows\MEMORY.DMP
2014-06-01 23:17 - 2013-10-14 20:05 - 00000000 ____D () C:\windows\Minidump
2014-06-01 22:58 - 2014-06-01 22:58 - 00001112 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-01 22:58 - 2014-06-01 22:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-01 22:58 - 2014-06-01 22:58 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-01 22:58 - 2014-06-01 22:58 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-01 22:09 - 2013-01-19 20:25 - 00000000 ____D () C:\Users\Michael Pfandler\Documents\Outlook-Dateien
2014-06-01 22:02 - 2014-06-01 22:02 - 00600080 _____ () C:\Users\Michael Pfandler\Desktop\Gmer.txt
2014-06-01 21:52 - 2014-06-01 21:52 - 00380416 _____ () C:\Users\Michael Pfandler\Desktop\Gmer-19357.exe
2014-06-01 21:51 - 2014-06-01 21:50 - 00052733 _____ () C:\Users\Michael Pfandler\Desktop\Addition.txt
2014-06-01 21:48 - 2014-06-01 21:48 - 00000494 _____ () C:\Users\Michael Pfandler\Desktop\defogger_disable.log
2014-06-01 21:48 - 2014-06-01 21:48 - 00000000 _____ () C:\Users\Michael Pfandler\defogger_reenable
2014-06-01 21:47 - 2014-06-01 21:47 - 00050477 _____ () C:\Users\Michael Pfandler\Desktop\Defogger.exe
2014-06-01 15:01 - 2013-10-18 09:41 - 00000000 ____D () C:\Users\Michael Pfandler\AppData\Roaming\vlc
2014-06-01 14:20 - 2013-01-12 09:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-01 13:24 - 2013-05-16 22:27 - 00627200 ___SH () C:\Users\Michael Pfandler\Desktop\Thumbs.db
2014-06-01 13:00 - 2013-12-25 15:07 - 00000000 ____D () C:\ProgramData\Oracle
2014-06-01 12:59 - 2014-06-01 12:59 - 00004387 _____ () C:\windows\SysWOW64\jupdate-1.7.0_60-b19.log
2014-06-01 12:59 - 2013-12-25 15:07 - 00000000 ____D () C:\Program Files (x86)\Java
2014-06-01 12:36 - 2013-05-25 15:27 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-31 21:05 - 2009-07-14 07:08 - 00032640 _____ () C:\windows\Tasks\SCHEDLGU.TXT
2014-05-31 19:41 - 2014-02-03 13:20 - 00001112 _____ () C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2301571512-4160980396-1932910602-1000Core.job
2014-05-31 15:45 - 2013-01-03 16:50 - 00000830 _____ () C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2014-05-29 19:52 - 2014-05-29 19:51 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-05-29 19:52 - 2013-05-20 10:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-05-29 19:51 - 2013-05-20 10:53 - 00000000 ____D () C:\Users\Michael Pfandler\AppData\Roaming\DVDVideoSoft
2014-05-29 00:35 - 2013-05-20 10:48 - 00000000 ____D () C:\Users\Michael Pfandler\AppData\Local\Windows Live
2014-05-28 18:17 - 2014-01-27 10:11 - 00085328 _____ (AVAST Software) C:\windows\system32\Drivers\aswstm.sys
2014-05-28 18:17 - 2013-01-04 18:03 - 01039096 _____ (AVAST Software) C:\windows\system32\Drivers\aswsnx.sys
2014-05-28 18:17 - 2013-01-04 18:03 - 00423240 _____ (AVAST Software) C:\windows\system32\Drivers\aswsp.sys
2014-05-28 18:17 - 2013-01-04 18:03 - 00003924 _____ () C:\windows\System32\Tasks\avast! Emergency Update
2014-05-28 18:16 - 2014-05-28 18:17 - 00029208 _____ () C:\windows\system32\Drivers\aswHwid.sys
2014-05-28 18:16 - 2014-05-28 18:16 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr
2014-05-28 18:16 - 2013-03-25 10:51 - 00208416 _____ () C:\windows\system32\Drivers\aswVmm.sys
2014-05-28 18:16 - 2013-03-25 10:51 - 00065776 _____ () C:\windows\system32\Drivers\aswRvrt.sys
2014-05-28 18:16 - 2013-01-04 18:03 - 00334648 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2014-05-28 18:16 - 2013-01-04 18:03 - 00093568 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2014-05-28 18:16 - 2013-01-04 18:03 - 00079184 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2014-05-12 07:26 - 2014-06-01 22:58 - 00091352 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2014-05-12 07:26 - 2014-06-01 22:58 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2014-05-12 07:25 - 2014-06-01 22:58 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-05-08 19:36 - 2014-02-03 13:20 - 00004156 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2301571512-4160980396-1932910602-1000UA
2014-05-08 19:36 - 2014-02-03 13:20 - 00003760 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2301571512-4160980396-1932910602-1000Core
2014-05-07 15:02 - 2014-06-01 12:59 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2014-05-07 14:59 - 2014-06-01 12:59 - 00264616 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2014-05-07 14:59 - 2014-06-01 12:59 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2014-05-07 14:58 - 2014-06-01 12:59 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2014-05-06 23:06 - 2013-01-04 19:29 - 00000000 ____D () C:\Users\Michael Pfandler\Desktop\Studium

Some content of TEMP:
====================
C:\Users\Michael Pfandler\AppData\Local\Temp\20130117011321321jniverify.dll
C:\Users\Michael Pfandler\AppData\Local\Temp\htmlayout.dll
C:\Users\Michael Pfandler\AppData\Local\Temp\ICReinstall_ZipExtractorSetup.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\jre-7u11-windows-i586-iftw.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Michael Pfandler\AppData\Local\Temp\Quarantine.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\Setup-C4.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Michael Pfandler\AppData\Local\Temp\sfamcc00002.dll
C:\Users\Michael Pfandler\AppData\Local\Temp\sfareca00001.dll
C:\Users\Michael Pfandler\AppData\Local\Temp\sfextra.dll
C:\Users\Michael Pfandler\AppData\Local\Temp\toolbar15798470.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\uninst1.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\uninstall15868764.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\uninstall27227696.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\uninstall27227728.exe
C:\Users\Michael Pfandler\AppData\Local\Temp\YSPCUNLR.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-01 14:52

==================== End Of Log ============================
         

--- --- ---

--- --- ---


Schönen Gruß
Michael

Java und Flash updaten.


Fertig

Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

• Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.
• Software Updates
  Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
  Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

• Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

• MalwareBytes Anti Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
  Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.
• WinPatrol
  Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

• SpywareBlaster
  Eine kurze Einführung findest du Hier
• MVPs hosts file
  Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
• WOT (Web of trust)
  Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

• Opera
• Mozilla Firefox.
  • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
  • NoScript
    Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    
  • AdblockPlus
    Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
    Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts

• Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
• verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Hallo schrauber,

sieht so aus, als ob jetzt alles wieder funktioniert. Das find ich klasse!

Vielen, vielen Dank für deine schnelle und individuelle Hilfe.
Ihr macht die Welt ein Stück besser :-)

Schöne Grüße
Michael

Gern Geschehen